Warning: Permanently added '[localhost]:27293' (ECDSA) to the list of known hosts.
2024/09/23 07:23:30 fuzzer started
2024/09/23 07:23:31 dialing manager at localhost:39901
syzkaller login: [   55.366683] cgroup: Unknown subsys name 'net'
[   55.367292] cgroup: Unknown subsys name 'net_prio'
[   55.368228] cgroup: Unknown subsys name 'devices'
[   55.368878] cgroup: Unknown subsys name 'blkio'
[   55.442223] cgroup: Unknown subsys name 'hugetlb'
[   55.442940] cgroup: Unknown subsys name 'rlimit'
2024/09/23 07:23:56 syscalls: 2215
2024/09/23 07:23:56 code coverage: enabled
2024/09/23 07:23:56 comparison tracing: enabled
2024/09/23 07:23:56 extra coverage: enabled
2024/09/23 07:23:56 setuid sandbox: enabled
2024/09/23 07:23:56 namespace sandbox: enabled
2024/09/23 07:23:56 Android sandbox: enabled
2024/09/23 07:23:56 fault injection: enabled
2024/09/23 07:23:56 leak checking: enabled
2024/09/23 07:23:56 net packet injection: enabled
2024/09/23 07:23:56 net device setup: enabled
2024/09/23 07:23:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/09/23 07:23:56 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/09/23 07:23:56 USB emulation: enabled
2024/09/23 07:23:56 hci packet injection: enabled
2024/09/23 07:23:56 wifi device emulation: enabled
2024/09/23 07:23:56 802.15.4 emulation: enabled
2024/09/23 07:23:57 fetching corpus: 50, signal 38464/40252 (executing program)
2024/09/23 07:23:57 fetching corpus: 100, signal 53818/57241 (executing program)
2024/09/23 07:23:58 fetching corpus: 150, signal 65997/70924 (executing program)
2024/09/23 07:23:58 fetching corpus: 200, signal 74971/81388 (executing program)
2024/09/23 07:23:59 fetching corpus: 250, signal 79966/87873 (executing program)
2024/09/23 07:23:59 fetching corpus: 300, signal 85958/95280 (executing program)
2024/09/23 07:23:59 fetching corpus: 350, signal 91136/101853 (executing program)
2024/09/23 07:24:00 fetching corpus: 400, signal 96251/108321 (executing program)
2024/09/23 07:24:00 fetching corpus: 450, signal 100504/113900 (executing program)
2024/09/23 07:24:00 fetching corpus: 500, signal 105408/120058 (executing program)
2024/09/23 07:24:00 fetching corpus: 550, signal 108522/124479 (executing program)
2024/09/23 07:24:00 fetching corpus: 600, signal 111595/128798 (executing program)
2024/09/23 07:24:01 fetching corpus: 650, signal 115056/133457 (executing program)
2024/09/23 07:24:01 fetching corpus: 700, signal 117416/137072 (executing program)
2024/09/23 07:24:02 fetching corpus: 750, signal 120936/141716 (executing program)
2024/09/23 07:24:02 fetching corpus: 800, signal 123005/145001 (executing program)
2024/09/23 07:24:02 fetching corpus: 850, signal 126069/149191 (executing program)
2024/09/23 07:24:03 fetching corpus: 900, signal 129184/153349 (executing program)
2024/09/23 07:24:03 fetching corpus: 950, signal 131748/156991 (executing program)
2024/09/23 07:24:03 fetching corpus: 1000, signal 134061/160396 (executing program)
2024/09/23 07:24:04 fetching corpus: 1050, signal 136427/163812 (executing program)
2024/09/23 07:24:04 fetching corpus: 1100, signal 138024/166549 (executing program)
2024/09/23 07:24:04 fetching corpus: 1150, signal 139923/169544 (executing program)
2024/09/23 07:24:05 fetching corpus: 1200, signal 142241/172885 (executing program)
2024/09/23 07:24:05 fetching corpus: 1250, signal 143986/175699 (executing program)
2024/09/23 07:24:05 fetching corpus: 1300, signal 145705/178459 (executing program)
2024/09/23 07:24:06 fetching corpus: 1350, signal 148033/181781 (executing program)
2024/09/23 07:24:06 fetching corpus: 1400, signal 151649/186199 (executing program)
2024/09/23 07:24:06 fetching corpus: 1450, signal 153266/188799 (executing program)
2024/09/23 07:24:06 fetching corpus: 1500, signal 155300/191744 (executing program)
2024/09/23 07:24:06 fetching corpus: 1550, signal 157351/194648 (executing program)
2024/09/23 07:24:07 fetching corpus: 1600, signal 159701/197812 (executing program)
2024/09/23 07:24:07 fetching corpus: 1650, signal 161795/200721 (executing program)
2024/09/23 07:24:07 fetching corpus: 1700, signal 163035/202942 (executing program)
2024/09/23 07:24:07 fetching corpus: 1750, signal 164192/205042 (executing program)
2024/09/23 07:24:07 fetching corpus: 1800, signal 165502/207274 (executing program)
2024/09/23 07:24:08 fetching corpus: 1850, signal 166441/209154 (executing program)
2024/09/23 07:24:08 fetching corpus: 1900, signal 167929/211446 (executing program)
2024/09/23 07:24:09 fetching corpus: 1950, signal 169961/214269 (executing program)
2024/09/23 07:24:09 fetching corpus: 2000, signal 171425/216587 (executing program)
2024/09/23 07:24:09 fetching corpus: 2050, signal 172771/218805 (executing program)
2024/09/23 07:24:10 fetching corpus: 2100, signal 174655/221386 (executing program)
2024/09/23 07:24:10 fetching corpus: 2150, signal 176025/223522 (executing program)
2024/09/23 07:24:11 fetching corpus: 2200, signal 176927/225334 (executing program)
2024/09/23 07:24:11 fetching corpus: 2250, signal 177718/227053 (executing program)
2024/09/23 07:24:12 fetching corpus: 2300, signal 179054/229189 (executing program)
2024/09/23 07:24:12 fetching corpus: 2350, signal 180556/231381 (executing program)
2024/09/23 07:24:13 fetching corpus: 2400, signal 181711/233343 (executing program)
2024/09/23 07:24:13 fetching corpus: 2450, signal 182969/235339 (executing program)
2024/09/23 07:24:14 fetching corpus: 2500, signal 183962/237186 (executing program)
2024/09/23 07:24:14 fetching corpus: 2550, signal 185305/239254 (executing program)
2024/09/23 07:24:15 fetching corpus: 2600, signal 187043/241602 (executing program)
2024/09/23 07:24:15 fetching corpus: 2650, signal 187964/243345 (executing program)
2024/09/23 07:24:16 fetching corpus: 2700, signal 189344/245410 (executing program)
2024/09/23 07:24:16 fetching corpus: 2750, signal 190552/247359 (executing program)
2024/09/23 07:24:16 fetching corpus: 2800, signal 191615/249195 (executing program)
2024/09/23 07:24:17 fetching corpus: 2850, signal 192793/251079 (executing program)
2024/09/23 07:24:17 fetching corpus: 2900, signal 194075/252991 (executing program)
2024/09/23 07:24:18 fetching corpus: 2950, signal 195067/254691 (executing program)
2024/09/23 07:24:18 fetching corpus: 3000, signal 196033/256405 (executing program)
2024/09/23 07:24:18 fetching corpus: 3050, signal 196868/257992 (executing program)
2024/09/23 07:24:18 fetching corpus: 3100, signal 197679/259552 (executing program)
2024/09/23 07:24:19 fetching corpus: 3150, signal 198700/261265 (executing program)
2024/09/23 07:24:19 fetching corpus: 3200, signal 199547/262839 (executing program)
2024/09/23 07:24:19 fetching corpus: 3250, signal 200439/264421 (executing program)
2024/09/23 07:24:19 fetching corpus: 3300, signal 201050/265786 (executing program)
2024/09/23 07:24:19 fetching corpus: 3350, signal 201997/267436 (executing program)
2024/09/23 07:24:20 fetching corpus: 3400, signal 202932/269037 (executing program)
2024/09/23 07:24:20 fetching corpus: 3450, signal 203923/270662 (executing program)
2024/09/23 07:24:20 fetching corpus: 3500, signal 204811/272148 (executing program)
2024/09/23 07:24:20 fetching corpus: 3550, signal 205416/273506 (executing program)
2024/09/23 07:24:20 fetching corpus: 3600, signal 206570/275183 (executing program)
2024/09/23 07:24:20 fetching corpus: 3650, signal 207364/276576 (executing program)
2024/09/23 07:24:21 fetching corpus: 3700, signal 208236/278112 (executing program)
2024/09/23 07:24:21 fetching corpus: 3750, signal 209120/279539 (executing program)
2024/09/23 07:24:21 fetching corpus: 3800, signal 209934/280938 (executing program)
2024/09/23 07:24:21 fetching corpus: 3850, signal 210710/282382 (executing program)
2024/09/23 07:24:22 fetching corpus: 3900, signal 211607/283863 (executing program)
2024/09/23 07:24:22 fetching corpus: 3950, signal 212242/285138 (executing program)
2024/09/23 07:24:22 fetching corpus: 4000, signal 213261/286679 (executing program)
2024/09/23 07:24:22 fetching corpus: 4050, signal 213988/288034 (executing program)
2024/09/23 07:24:23 fetching corpus: 4100, signal 215008/289506 (executing program)
2024/09/23 07:24:23 fetching corpus: 4150, signal 215620/290737 (executing program)
2024/09/23 07:24:23 fetching corpus: 4200, signal 216648/292251 (executing program)
2024/09/23 07:24:23 fetching corpus: 4250, signal 217264/293484 (executing program)
2024/09/23 07:24:23 fetching corpus: 4300, signal 217819/294697 (executing program)
2024/09/23 07:24:23 fetching corpus: 4350, signal 218595/296025 (executing program)
2024/09/23 07:24:24 fetching corpus: 4400, signal 219128/297170 (executing program)
2024/09/23 07:24:24 fetching corpus: 4450, signal 219581/298250 (executing program)
2024/09/23 07:24:25 fetching corpus: 4500, signal 220471/299595 (executing program)
2024/09/23 07:24:25 fetching corpus: 4550, signal 221019/300742 (executing program)
2024/09/23 07:24:25 fetching corpus: 4600, signal 221784/302038 (executing program)
2024/09/23 07:24:26 fetching corpus: 4650, signal 222521/303324 (executing program)
2024/09/23 07:24:26 fetching corpus: 4700, signal 223438/304689 (executing program)
2024/09/23 07:24:26 fetching corpus: 4750, signal 224088/305875 (executing program)
2024/09/23 07:24:27 fetching corpus: 4800, signal 224810/307140 (executing program)
2024/09/23 07:24:27 fetching corpus: 4850, signal 225408/308305 (executing program)
2024/09/23 07:24:27 fetching corpus: 4900, signal 226072/309483 (executing program)
2024/09/23 07:24:28 fetching corpus: 4950, signal 226893/310744 (executing program)
2024/09/23 07:24:28 fetching corpus: 5000, signal 227501/311885 (executing program)
2024/09/23 07:24:29 fetching corpus: 5050, signal 228216/313050 (executing program)
2024/09/23 07:24:29 fetching corpus: 5100, signal 228835/314208 (executing program)
2024/09/23 07:24:29 fetching corpus: 5150, signal 229497/315353 (executing program)
2024/09/23 07:24:29 fetching corpus: 5200, signal 229947/316397 (executing program)
2024/09/23 07:24:30 fetching corpus: 5250, signal 230619/317544 (executing program)
2024/09/23 07:24:30 fetching corpus: 5300, signal 231182/318590 (executing program)
2024/09/23 07:24:30 fetching corpus: 5350, signal 231683/319654 (executing program)
2024/09/23 07:24:30 fetching corpus: 5400, signal 232112/320688 (executing program)
2024/09/23 07:24:31 fetching corpus: 5450, signal 232479/321652 (executing program)
2024/09/23 07:24:31 fetching corpus: 5500, signal 233056/322693 (executing program)
2024/09/23 07:24:31 fetching corpus: 5550, signal 233735/323783 (executing program)
2024/09/23 07:24:32 fetching corpus: 5600, signal 234228/324808 (executing program)
2024/09/23 07:24:32 fetching corpus: 5650, signal 234858/325872 (executing program)
2024/09/23 07:24:32 fetching corpus: 5700, signal 235399/326864 (executing program)
2024/09/23 07:24:33 fetching corpus: 5750, signal 235983/327911 (executing program)
2024/09/23 07:24:33 fetching corpus: 5800, signal 236467/328887 (executing program)
2024/09/23 07:24:33 fetching corpus: 5850, signal 237070/329926 (executing program)
2024/09/23 07:24:33 fetching corpus: 5900, signal 237830/330996 (executing program)
2024/09/23 07:24:34 fetching corpus: 5950, signal 238257/331910 (executing program)
2024/09/23 07:24:34 fetching corpus: 6000, signal 238823/332888 (executing program)
2024/09/23 07:24:34 fetching corpus: 6050, signal 239407/333890 (executing program)
2024/09/23 07:24:35 fetching corpus: 6100, signal 240259/334976 (executing program)
2024/09/23 07:24:35 fetching corpus: 6150, signal 240782/335931 (executing program)
2024/09/23 07:24:36 fetching corpus: 6200, signal 241426/336952 (executing program)
2024/09/23 07:24:36 fetching corpus: 6250, signal 242104/337949 (executing program)
2024/09/23 07:24:37 fetching corpus: 6300, signal 242579/338856 (executing program)
2024/09/23 07:24:37 fetching corpus: 6350, signal 243099/339800 (executing program)
2024/09/23 07:24:38 fetching corpus: 6400, signal 243670/340790 (executing program)
2024/09/23 07:24:39 fetching corpus: 6450, signal 244377/341842 (executing program)
2024/09/23 07:24:39 fetching corpus: 6500, signal 245036/342810 (executing program)
2024/09/23 07:24:40 fetching corpus: 6550, signal 245461/343684 (executing program)
2024/09/23 07:24:40 fetching corpus: 6600, signal 246225/344694 (executing program)
2024/09/23 07:24:41 fetching corpus: 6650, signal 246795/345611 (executing program)
2024/09/23 07:24:42 fetching corpus: 6700, signal 247325/346554 (executing program)
2024/09/23 07:24:42 fetching corpus: 6750, signal 248110/347551 (executing program)
2024/09/23 07:24:43 fetching corpus: 6800, signal 248508/348391 (executing program)
2024/09/23 07:24:43 fetching corpus: 6850, signal 249156/349328 (executing program)
2024/09/23 07:24:43 fetching corpus: 6900, signal 249515/350139 (executing program)
2024/09/23 07:24:44 fetching corpus: 6950, signal 249899/350962 (executing program)
2024/09/23 07:24:44 fetching corpus: 7000, signal 250432/351857 (executing program)
2024/09/23 07:24:44 fetching corpus: 7050, signal 251125/352754 (executing program)
2024/09/23 07:24:45 fetching corpus: 7100, signal 251574/353609 (executing program)
2024/09/23 07:24:45 fetching corpus: 7150, signal 252322/354503 (executing program)
2024/09/23 07:24:46 fetching corpus: 7200, signal 252715/355312 (executing program)
2024/09/23 07:24:46 fetching corpus: 7250, signal 253203/356147 (executing program)
2024/09/23 07:24:47 fetching corpus: 7300, signal 253672/356927 (executing program)
2024/09/23 07:24:47 fetching corpus: 7350, signal 254167/357772 (executing program)
2024/09/23 07:24:48 fetching corpus: 7400, signal 254503/358520 (executing program)
2024/09/23 07:24:48 fetching corpus: 7450, signal 254954/359359 (executing program)
2024/09/23 07:24:49 fetching corpus: 7500, signal 255378/360182 (executing program)
2024/09/23 07:24:50 fetching corpus: 7550, signal 255649/360959 (executing program)
2024/09/23 07:24:50 fetching corpus: 7600, signal 256203/361733 (executing program)
2024/09/23 07:24:50 fetching corpus: 7650, signal 256715/362519 (executing program)
2024/09/23 07:24:51 fetching corpus: 7700, signal 257171/363341 (executing program)
2024/09/23 07:24:51 fetching corpus: 7750, signal 257750/364170 (executing program)
2024/09/23 07:24:52 fetching corpus: 7800, signal 258219/364970 (executing program)
2024/09/23 07:24:53 fetching corpus: 7850, signal 258545/365734 (executing program)
2024/09/23 07:24:53 fetching corpus: 7900, signal 259040/366475 (executing program)
2024/09/23 07:24:53 fetching corpus: 7950, signal 259382/367210 (executing program)
2024/09/23 07:24:54 fetching corpus: 8000, signal 259862/367972 (executing program)
2024/09/23 07:24:54 fetching corpus: 8050, signal 260208/368715 (executing program)
2024/09/23 07:24:54 fetching corpus: 8100, signal 260517/369461 (executing program)
2024/09/23 07:24:54 fetching corpus: 8150, signal 260801/370178 (executing program)
2024/09/23 07:24:55 fetching corpus: 8200, signal 261280/370931 (executing program)
2024/09/23 07:24:55 fetching corpus: 8250, signal 261650/371702 (executing program)
2024/09/23 07:24:55 fetching corpus: 8300, signal 261941/372403 (executing program)
2024/09/23 07:24:55 fetching corpus: 8350, signal 262225/373110 (executing program)
2024/09/23 07:24:55 fetching corpus: 8400, signal 262617/373820 (executing program)
2024/09/23 07:24:56 fetching corpus: 8450, signal 263205/374514 (executing program)
2024/09/23 07:24:56 fetching corpus: 8500, signal 263716/375225 (executing program)
2024/09/23 07:24:56 fetching corpus: 8550, signal 264121/375907 (executing program)
2024/09/23 07:24:56 fetching corpus: 8600, signal 264503/376597 (executing program)
2024/09/23 07:24:56 fetching corpus: 8650, signal 264864/377289 (executing program)
2024/09/23 07:24:56 fetching corpus: 8700, signal 265129/377974 (executing program)
2024/09/23 07:24:56 fetching corpus: 8750, signal 265612/378634 (executing program)
2024/09/23 07:24:57 fetching corpus: 8800, signal 265875/379311 (executing program)
2024/09/23 07:24:57 fetching corpus: 8850, signal 266276/379990 (executing program)
2024/09/23 07:24:57 fetching corpus: 8900, signal 267433/380717 (executing program)
2024/09/23 07:24:57 fetching corpus: 8950, signal 267689/381366 (executing program)
2024/09/23 07:24:58 fetching corpus: 9000, signal 268067/382013 (executing program)
2024/09/23 07:24:58 fetching corpus: 9050, signal 268444/382684 (executing program)
2024/09/23 07:24:58 fetching corpus: 9100, signal 268752/383334 (executing program)
2024/09/23 07:24:59 fetching corpus: 9150, signal 269154/384011 (executing program)
2024/09/23 07:24:59 fetching corpus: 9200, signal 269564/384638 (executing program)
2024/09/23 07:24:59 fetching corpus: 9250, signal 269872/385300 (executing program)
2024/09/23 07:24:59 fetching corpus: 9300, signal 270310/385979 (executing program)
2024/09/23 07:25:00 fetching corpus: 9350, signal 270544/386621 (executing program)
2024/09/23 07:25:00 fetching corpus: 9400, signal 270941/387284 (executing program)
2024/09/23 07:25:00 fetching corpus: 9450, signal 271352/387905 (executing program)
2024/09/23 07:25:00 fetching corpus: 9500, signal 271769/388573 (executing program)
2024/09/23 07:25:01 fetching corpus: 9550, signal 272071/389200 (executing program)
2024/09/23 07:25:01 fetching corpus: 9600, signal 272464/389801 (executing program)
2024/09/23 07:25:02 fetching corpus: 9650, signal 272867/390419 (executing program)
2024/09/23 07:25:02 fetching corpus: 9700, signal 273222/391036 (executing program)
2024/09/23 07:25:02 fetching corpus: 9750, signal 273584/391662 (executing program)
2024/09/23 07:25:03 fetching corpus: 9800, signal 274165/392310 (executing program)
2024/09/23 07:25:03 fetching corpus: 9850, signal 274887/392442 (executing program)
2024/09/23 07:25:03 fetching corpus: 9900, signal 275412/392442 (executing program)
2024/09/23 07:25:04 fetching corpus: 9950, signal 275743/392442 (executing program)
2024/09/23 07:25:04 fetching corpus: 10000, signal 276108/392442 (executing program)
2024/09/23 07:25:05 fetching corpus: 10050, signal 276369/392442 (executing program)
2024/09/23 07:25:05 fetching corpus: 10100, signal 276689/392442 (executing program)
2024/09/23 07:25:06 fetching corpus: 10150, signal 277071/392442 (executing program)
2024/09/23 07:25:06 fetching corpus: 10200, signal 277312/392442 (executing program)
2024/09/23 07:25:06 fetching corpus: 10250, signal 277755/392442 (executing program)
2024/09/23 07:25:06 fetching corpus: 10300, signal 278055/392442 (executing program)
2024/09/23 07:25:07 fetching corpus: 10350, signal 278431/392442 (executing program)
2024/09/23 07:25:07 fetching corpus: 10400, signal 278846/392442 (executing program)
2024/09/23 07:25:07 fetching corpus: 10450, signal 279238/392442 (executing program)
2024/09/23 07:25:08 fetching corpus: 10500, signal 279800/392442 (executing program)
2024/09/23 07:25:09 fetching corpus: 10550, signal 280183/392442 (executing program)
2024/09/23 07:25:09 fetching corpus: 10600, signal 280558/392442 (executing program)
2024/09/23 07:25:10 fetching corpus: 10650, signal 280849/392442 (executing program)
2024/09/23 07:25:10 fetching corpus: 10700, signal 281175/392442 (executing program)
2024/09/23 07:25:11 fetching corpus: 10750, signal 281558/392442 (executing program)
2024/09/23 07:25:11 fetching corpus: 10800, signal 281932/392442 (executing program)
2024/09/23 07:25:11 fetching corpus: 10850, signal 282311/392442 (executing program)
2024/09/23 07:25:12 fetching corpus: 10900, signal 282700/392442 (executing program)
2024/09/23 07:25:12 fetching corpus: 10950, signal 282978/392442 (executing program)
2024/09/23 07:25:13 fetching corpus: 11000, signal 283333/392442 (executing program)
2024/09/23 07:25:13 fetching corpus: 11050, signal 283678/392442 (executing program)
2024/09/23 07:25:13 fetching corpus: 11100, signal 284095/392442 (executing program)
2024/09/23 07:25:13 fetching corpus: 11150, signal 284415/392442 (executing program)
2024/09/23 07:25:14 fetching corpus: 11200, signal 284678/392442 (executing program)
2024/09/23 07:25:14 fetching corpus: 11250, signal 285124/392442 (executing program)
2024/09/23 07:25:14 fetching corpus: 11300, signal 285438/392442 (executing program)
2024/09/23 07:25:15 fetching corpus: 11350, signal 285783/392442 (executing program)
2024/09/23 07:25:16 fetching corpus: 11400, signal 286177/392442 (executing program)
2024/09/23 07:25:16 fetching corpus: 11450, signal 286559/392442 (executing program)
2024/09/23 07:25:17 fetching corpus: 11500, signal 286926/392442 (executing program)
2024/09/23 07:25:17 fetching corpus: 11550, signal 287200/392442 (executing program)
2024/09/23 07:25:17 fetching corpus: 11600, signal 287534/392442 (executing program)
2024/09/23 07:25:18 fetching corpus: 11650, signal 287797/392442 (executing program)
2024/09/23 07:25:18 fetching corpus: 11700, signal 288039/392442 (executing program)
2024/09/23 07:25:18 fetching corpus: 11750, signal 288455/392442 (executing program)
2024/09/23 07:25:18 fetching corpus: 11800, signal 288752/392442 (executing program)
2024/09/23 07:25:18 fetching corpus: 11850, signal 289180/392442 (executing program)
2024/09/23 07:25:18 fetching corpus: 11900, signal 289353/392442 (executing program)
2024/09/23 07:25:19 fetching corpus: 11950, signal 289597/392442 (executing program)
2024/09/23 07:25:19 fetching corpus: 12000, signal 289852/392442 (executing program)
2024/09/23 07:25:19 fetching corpus: 12050, signal 290272/392442 (executing program)
2024/09/23 07:25:19 fetching corpus: 12100, signal 290547/392442 (executing program)
2024/09/23 07:25:20 fetching corpus: 12150, signal 290824/392442 (executing program)
2024/09/23 07:25:20 fetching corpus: 12200, signal 291029/392442 (executing program)
2024/09/23 07:25:21 fetching corpus: 12250, signal 291366/392442 (executing program)
2024/09/23 07:25:21 fetching corpus: 12300, signal 291638/392442 (executing program)
2024/09/23 07:25:22 fetching corpus: 12350, signal 291931/392442 (executing program)
2024/09/23 07:25:22 fetching corpus: 12400, signal 292592/392442 (executing program)
2024/09/23 07:25:23 fetching corpus: 12450, signal 292846/392442 (executing program)
2024/09/23 07:25:23 fetching corpus: 12500, signal 293121/392442 (executing program)
2024/09/23 07:25:23 fetching corpus: 12550, signal 293507/392442 (executing program)
2024/09/23 07:25:23 fetching corpus: 12600, signal 293766/392442 (executing program)
2024/09/23 07:25:23 fetching corpus: 12650, signal 294005/392442 (executing program)
2024/09/23 07:25:24 fetching corpus: 12700, signal 294333/392442 (executing program)
2024/09/23 07:25:24 fetching corpus: 12750, signal 294642/392442 (executing program)
2024/09/23 07:25:24 fetching corpus: 12800, signal 294950/392442 (executing program)
2024/09/23 07:25:24 fetching corpus: 12850, signal 295306/392442 (executing program)
2024/09/23 07:25:25 fetching corpus: 12900, signal 295560/392442 (executing program)
2024/09/23 07:25:25 fetching corpus: 12950, signal 295937/392442 (executing program)
2024/09/23 07:25:26 fetching corpus: 13000, signal 296334/392442 (executing program)
2024/09/23 07:25:27 fetching corpus: 13050, signal 296771/392442 (executing program)
2024/09/23 07:25:27 fetching corpus: 13100, signal 297111/392442 (executing program)
2024/09/23 07:25:27 fetching corpus: 13150, signal 297421/392442 (executing program)
2024/09/23 07:25:28 fetching corpus: 13200, signal 297790/392442 (executing program)
2024/09/23 07:25:28 fetching corpus: 13250, signal 298065/392442 (executing program)
2024/09/23 07:25:28 fetching corpus: 13300, signal 298301/392442 (executing program)
2024/09/23 07:25:29 fetching corpus: 13350, signal 298596/392442 (executing program)
2024/09/23 07:25:30 fetching corpus: 13400, signal 298942/392442 (executing program)
2024/09/23 07:25:30 fetching corpus: 13450, signal 299281/392442 (executing program)
2024/09/23 07:25:31 fetching corpus: 13500, signal 299505/392442 (executing program)
2024/09/23 07:25:31 fetching corpus: 13550, signal 299731/392442 (executing program)
2024/09/23 07:25:31 fetching corpus: 13600, signal 299947/392442 (executing program)
2024/09/23 07:25:31 fetching corpus: 13650, signal 300190/392442 (executing program)
2024/09/23 07:25:31 fetching corpus: 13700, signal 300427/392442 (executing program)
2024/09/23 07:25:32 fetching corpus: 13750, signal 300887/392442 (executing program)
2024/09/23 07:25:32 fetching corpus: 13800, signal 301126/392442 (executing program)
2024/09/23 07:25:32 fetching corpus: 13850, signal 301571/392442 (executing program)
2024/09/23 07:25:33 fetching corpus: 13900, signal 301926/392442 (executing program)
2024/09/23 07:25:33 fetching corpus: 13950, signal 302205/392442 (executing program)
2024/09/23 07:25:33 fetching corpus: 14000, signal 302513/392442 (executing program)
2024/09/23 07:25:34 fetching corpus: 14050, signal 302757/392442 (executing program)
2024/09/23 07:25:34 fetching corpus: 14100, signal 302997/392442 (executing program)
2024/09/23 07:25:34 fetching corpus: 14150, signal 303242/392442 (executing program)
2024/09/23 07:25:34 fetching corpus: 14200, signal 303448/392442 (executing program)
2024/09/23 07:25:35 fetching corpus: 14250, signal 303779/392442 (executing program)
2024/09/23 07:25:35 fetching corpus: 14300, signal 304057/392442 (executing program)
2024/09/23 07:25:35 fetching corpus: 14350, signal 304335/392442 (executing program)
2024/09/23 07:25:35 fetching corpus: 14400, signal 304470/392442 (executing program)
2024/09/23 07:25:36 fetching corpus: 14450, signal 304675/392442 (executing program)
2024/09/23 07:25:36 fetching corpus: 14500, signal 305039/392442 (executing program)
2024/09/23 07:25:36 fetching corpus: 14550, signal 305272/392442 (executing program)
2024/09/23 07:25:36 fetching corpus: 14600, signal 305458/392442 (executing program)
2024/09/23 07:25:37 fetching corpus: 14650, signal 305691/392442 (executing program)
2024/09/23 07:25:37 fetching corpus: 14700, signal 305918/392442 (executing program)
2024/09/23 07:25:37 fetching corpus: 14750, signal 306138/392442 (executing program)
2024/09/23 07:25:37 fetching corpus: 14800, signal 306424/392442 (executing program)
2024/09/23 07:25:37 fetching corpus: 14850, signal 306683/392442 (executing program)
2024/09/23 07:25:38 fetching corpus: 14900, signal 306914/392442 (executing program)
2024/09/23 07:25:38 fetching corpus: 14950, signal 307097/392442 (executing program)
2024/09/23 07:25:38 fetching corpus: 15000, signal 307297/392442 (executing program)
2024/09/23 07:25:38 fetching corpus: 15050, signal 307511/392442 (executing program)
2024/09/23 07:25:38 fetching corpus: 15100, signal 307765/392442 (executing program)
2024/09/23 07:25:38 fetching corpus: 15150, signal 308137/392442 (executing program)
2024/09/23 07:25:39 fetching corpus: 15200, signal 308367/392442 (executing program)
2024/09/23 07:25:39 fetching corpus: 15250, signal 308648/392442 (executing program)
2024/09/23 07:25:39 fetching corpus: 15300, signal 308868/392442 (executing program)
2024/09/23 07:25:39 fetching corpus: 15350, signal 309076/392442 (executing program)
2024/09/23 07:25:39 fetching corpus: 15400, signal 309285/392442 (executing program)
2024/09/23 07:25:39 fetching corpus: 15450, signal 309604/392442 (executing program)
2024/09/23 07:25:40 fetching corpus: 15500, signal 309931/392442 (executing program)
2024/09/23 07:25:40 fetching corpus: 15550, signal 310212/392442 (executing program)
2024/09/23 07:25:40 fetching corpus: 15600, signal 310535/392442 (executing program)
2024/09/23 07:25:40 fetching corpus: 15650, signal 310745/392442 (executing program)
2024/09/23 07:25:40 fetching corpus: 15700, signal 311011/392442 (executing program)
2024/09/23 07:25:41 fetching corpus: 15750, signal 311220/392442 (executing program)
2024/09/23 07:25:41 fetching corpus: 15800, signal 311435/392442 (executing program)
2024/09/23 07:25:41 fetching corpus: 15850, signal 311590/392442 (executing program)
2024/09/23 07:25:42 fetching corpus: 15900, signal 311783/392442 (executing program)
2024/09/23 07:25:42 fetching corpus: 15950, signal 311949/392442 (executing program)
2024/09/23 07:25:42 fetching corpus: 16000, signal 312195/392442 (executing program)
2024/09/23 07:25:43 fetching corpus: 16050, signal 312500/392442 (executing program)
2024/09/23 07:25:43 fetching corpus: 16100, signal 312757/392442 (executing program)
2024/09/23 07:25:43 fetching corpus: 16150, signal 312988/392442 (executing program)
2024/09/23 07:25:43 fetching corpus: 16200, signal 313177/392442 (executing program)
2024/09/23 07:25:44 fetching corpus: 16250, signal 313466/392442 (executing program)
2024/09/23 07:25:44 fetching corpus: 16300, signal 313647/392442 (executing program)
2024/09/23 07:25:45 fetching corpus: 16350, signal 313878/392444 (executing program)
2024/09/23 07:25:45 fetching corpus: 16400, signal 314107/392444 (executing program)
2024/09/23 07:25:45 fetching corpus: 16450, signal 314279/392444 (executing program)
2024/09/23 07:25:46 fetching corpus: 16500, signal 314457/392444 (executing program)
2024/09/23 07:25:46 fetching corpus: 16550, signal 314669/392444 (executing program)
2024/09/23 07:25:46 fetching corpus: 16600, signal 314878/392444 (executing program)
2024/09/23 07:25:46 fetching corpus: 16650, signal 315042/392444 (executing program)
2024/09/23 07:25:47 fetching corpus: 16700, signal 315227/392444 (executing program)
2024/09/23 07:25:47 fetching corpus: 16750, signal 315446/392444 (executing program)
2024/09/23 07:25:47 fetching corpus: 16800, signal 315681/392444 (executing program)
2024/09/23 07:25:47 fetching corpus: 16850, signal 315902/392444 (executing program)
2024/09/23 07:25:47 fetching corpus: 16900, signal 316169/392444 (executing program)
2024/09/23 07:25:48 fetching corpus: 16950, signal 316340/392444 (executing program)
2024/09/23 07:25:48 fetching corpus: 17000, signal 316546/392444 (executing program)
2024/09/23 07:25:48 fetching corpus: 17050, signal 316798/392444 (executing program)
2024/09/23 07:25:49 fetching corpus: 17100, signal 316988/392444 (executing program)
2024/09/23 07:25:50 fetching corpus: 17150, signal 317215/392444 (executing program)
2024/09/23 07:25:50 fetching corpus: 17200, signal 317390/392444 (executing program)
2024/09/23 07:25:51 fetching corpus: 17250, signal 317703/392444 (executing program)
2024/09/23 07:25:51 fetching corpus: 17300, signal 317988/392444 (executing program)
2024/09/23 07:25:51 fetching corpus: 17350, signal 318256/392444 (executing program)
2024/09/23 07:25:51 fetching corpus: 17400, signal 318380/392444 (executing program)
2024/09/23 07:25:52 fetching corpus: 17450, signal 318544/392444 (executing program)
2024/09/23 07:25:52 fetching corpus: 17500, signal 318823/392444 (executing program)
2024/09/23 07:25:52 fetching corpus: 17550, signal 319025/392444 (executing program)
2024/09/23 07:25:52 fetching corpus: 17600, signal 319236/392444 (executing program)
2024/09/23 07:25:53 fetching corpus: 17650, signal 319427/392444 (executing program)
2024/09/23 07:25:53 fetching corpus: 17700, signal 319562/392444 (executing program)
2024/09/23 07:25:53 fetching corpus: 17750, signal 319857/392444 (executing program)
2024/09/23 07:25:54 fetching corpus: 17800, signal 320119/392444 (executing program)
2024/09/23 07:25:54 fetching corpus: 17850, signal 320383/392444 (executing program)
2024/09/23 07:25:54 fetching corpus: 17900, signal 320593/392444 (executing program)
2024/09/23 07:25:55 fetching corpus: 17950, signal 320834/392444 (executing program)
2024/09/23 07:25:55 fetching corpus: 18000, signal 321069/392444 (executing program)
2024/09/23 07:25:56 fetching corpus: 18050, signal 321345/392444 (executing program)
2024/09/23 07:25:56 fetching corpus: 18100, signal 321518/392444 (executing program)
2024/09/23 07:25:57 fetching corpus: 18150, signal 321755/392444 (executing program)
2024/09/23 07:25:57 fetching corpus: 18200, signal 322004/392444 (executing program)
2024/09/23 07:25:58 fetching corpus: 18250, signal 322178/392444 (executing program)
2024/09/23 07:25:58 fetching corpus: 18254, signal 322186/392444 (executing program)
2024/09/23 07:25:58 fetching corpus: 18254, signal 322186/392444 (executing program)
2024/09/23 07:26:00 starting 8 fuzzer processes
07:26:00 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x30000000}, 0x400c981)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {0x40}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r0)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x118, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "61a9e1dd417b86206d9389841274e02b3509e41965df581db402e29665c9629c"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1000}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0xc001)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x3f}}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xffff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0xa5ed}, {0x8, 0x13, 0x8}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x41)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x101040, 0x0)
recvmmsg$unix(r7, &(0x7f0000003700)=[{{&(0x7f0000000b40), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f0000000c40)=""/6, 0x6}, {&(0x7f0000000c80)=""/168, 0xa8}, {&(0x7f0000000d40)=""/111, 0x6f}, {&(0x7f0000000dc0)=""/113, 0x71}, {&(0x7f0000000e40)=""/90, 0x5a}, {&(0x7f0000000ec0)=""/239, 0xef}], 0x7, &(0x7f0000001040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/234, 0xea}, {&(0x7f0000001280)=""/234, 0xea}, {&(0x7f0000001380)=""/120, 0x78}], 0x4}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000014c0)=""/209, 0xd1}, {&(0x7f00000015c0)=""/54, 0x36}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/151, 0x97}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/132, 0x84}, {&(0x7f0000001840)=""/99, 0x63}], 0x7, &(0x7f0000001940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001a40)=""/16, 0x10}, {&(0x7f0000001a80)=""/83, 0x53}, {&(0x7f0000001b00)=""/103, 0x67}, {&(0x7f0000001b80)=""/76, 0x4c}, {&(0x7f0000001c00)=""/213, 0xd5}], 0x5, &(0x7f0000001d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/36, 0x24}, {&(0x7f0000002f80)=""/205, 0xcd}, {&(0x7f0000003080)=""/20, 0x14}, {&(0x7f00000030c0)=""/41, 0x29}, {&(0x7f0000003100)=""/55, 0x37}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/138, 0x8a}, {&(0x7f0000003240)=""/170, 0xaa}], 0x9, &(0x7f00000033c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f00000036c0)=[{&(0x7f00000035c0)=""/225, 0xe1}], 0x1}}], 0x6, 0x20, 0x0)
fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000003880))
pipe(&(0x7f00000038c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
readv(r9, &(0x7f0000004980)=[{&(0x7f0000003900)=""/49, 0x31}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/11, 0xb}], 0x3)
openat(0xffffffffffffffff, &(0x7f00000049c0)='./file0\x00', 0x40400, 0x80)

07:26:00 executing program 4:
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8080}, 0x40800)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x16c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fcad9dd33c4881a7f94d8bfdd7eb853fff2a73dcba047b72d7ca195e16bda7a0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9b4e85a910cdfab5d162dea21bdfbfbe"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a303bdf0801e2848ce9d3bd5cacb7c66"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8de636a12587849a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13bf7fc43bc6c9c2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x13a}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e4335bfbc7b34a70"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ace3c308825b486e4a2b2cc9654cc314"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "49b3ca5a9e6de6a7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9646e3d00f88f969b4a1389dfd314772"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9b27a81680910397bd6aba36dc02e11e"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0ec9208ce29cb515475e5c0923df1900"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f2cdc86657c8322edc22017fef3c86a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f44eadfc78e77bba"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c8f44402a2b20a17d819435860bc6b77"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e5d3b1ee932a01b34ea72ae4348f6939"}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x22044844)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000500))
preadv(r0, &(0x7f0000001980)=[{&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/93, 0x5d}], 0x7, 0xffffffff, 0x3)
r2 = pidfd_open(0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001a00)={<r3=>0x0, 0x8, 0xe55, 0x1})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001e00)={0x2, 0x10000, @start={<r4=>0x0, 0x1, "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", "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"}, [0x3, 0x1, 0x10000, 0xf42, 0x7, 0xb8, 0x1, 0x8, 0x6, 0x1, 0x4, 0x3b, 0x1f, 0x3, 0x8, 0x1, 0x8, 0x10000, 0x7, 0x9, 0xffffffffffffe4f8, 0xffffffff00000001, 0x8, 0x0, 0x7, 0x10000, 0x101, 0x10001, 0x935, 0x61, 0x0, 0x4, 0x0, 0x9, 0x2, 0x6, 0x3, 0xb7e, 0x2, 0x7ff, 0xffffffffffff0000, 0x2, 0x5cd, 0x80000001, 0x100000000, 0x0, 0x62, 0xaa6, 0x400, 0x6, 0x6, 0xfffffffffffffffb, 0x0, 0x7ff, 0x4, 0x200, 0x4, 0x7, 0x6, 0x0, 0x80000000, 0x7, 0xab2b, 0x9]})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002840)={0x0, 0x7, {0x6, @struct={0x0, 0x1000}, r3, 0xfffffffffffeffff, 0x4, 0xffffffffffffc212, 0x7, 0x9, 0x410, @struct={0x76a, 0x8}, 0x6, 0x5, [0x2, 0x1ff, 0x9, 0x3, 0xf76, 0x3]}, {0x7ff, @struct={0xff, 0xfffffffe}, r4, 0x5, 0x7, 0x100000001, 0x8787, 0x3, 0x10, @usage=0x9, 0x401, 0x6b89, [0x99, 0x1, 0xfffffffffffffffb, 0x401, 0x284b, 0x3]}, {0x3, @usage=0x3, 0x0, 0x2, 0x7ff, 0x5, 0x0, 0x664351e, 0x2, @usage=0x6, 0x40000, 0x4, [0xcba, 0xad7d, 0x9, 0x4a, 0xffff, 0x9]}, {0x7ff, 0x400000008, 0x80}})
ftruncate(r2, 0x9)
writev(r0, &(0x7f00000030c0)=[{&(0x7f0000002c40)="7626e362746e3b4d327d8c791080c88472c0ce91a0df5d8052b12ad91ef028f47318b3fcb02414d37d71823a4caffc089129aefa6271df63b16ca1ad21e043", 0x3f}, {&(0x7f0000002c80)="2dd10c571245f5475cb9d30502dd2ac22d57fcecc8d93b785944a2061409d0e24a79ec4c94009c7514a07fca9507f578", 0x30}, {&(0x7f0000002cc0)="5f1667ff522537eacdd8cf323e2e54d20b9508a0d9490ba4e715e8455bf782e081daa256a2b7610fb33cfc71ea63cd727776245098c54da33f43c782a2313daa17376519099cda5c73df8fc9a3b219e0b6ddb10252a575100bc6226c4348bcc81636d327c10e3ea19884b17a7deb1681aa3c4bfef12f3881a631ca9b08d24692b12bc98b016a1c2f", 0x88}, {&(0x7f0000002d80)="9acddfdd232c8109c5545b85538ccf9f11", 0x11}, {&(0x7f0000002dc0)="f9e8d26dececa714251f5056c9b093b7b657ce9efbab79e4ef875bc4bf62bbdeffde8ffe6d03785be63403dac20105e938f00975b243e31ab0431edfc7ceca24166d8eceded17a21e2fdb07decb602600a290692ad92cd1895227697b3429c9b40ae24d24f81ed021d5b4a4b479559246619a0c457c4c5034387149fba448ad4ef3ab6bb93e3c1c82c66d3b1083c26bf824421bd880010dec861275706cf4f98e0bcbf8efdf8656c2d41ac4dca4394eb1480ed273104488d207368771f5ec45c3243e3c7d6b3312e39bd9226a7c99326578e0761591ce8da161b50db0ebfb1aa1079a51fe16fc089a7ec94b4998cc77105496350dbff", 0xf6}, {&(0x7f0000002ec0)="8b340378cea0eb1b3a14bce89db7ce6811c2ccdf15eeff5c60ccec5946ce5b698dfe5fa4efcff279716c007ff3931742", 0x30}, {&(0x7f0000002f00)="aa1ddef14e43b1f0bb4d1ee5506b3ff80df81cf3248a6406ebefc4279235839406aa303e9252bac14c6a4b8aa1ab82223eba48a34067a95943d86ceb08bd17e9b0663f4dbf5582a243d1bc3ab11a63dc75f590bc95467c5130f872e6e486f230d0e816962b", 0x65}, {&(0x7f0000002f80)="02ef9c95ce2e44fe73369422ac4b1e5c35e244b3e4dc6bf83951483ce475bd5b041298e437c348a2c6424e1c4a2be7ec79563b335af8439ab54eb39768c84b84a01fbfd5164fa6d7829e4c74a831315d04107ef78e5318c2c6718c2322879ef5b7a6bc64c8ebb41756cac972883daf7c5978d94c360f1bfda72ae881a1f9eb170f8d13c8d92e332e0f28d1b7169334f3ad678470f4ee3e79dc9006509cb6bc6bf1af2c15bd7405e66e7d64", 0xab}, {&(0x7f0000003040)="0c3cf2256a4dcbd97cdac5ecd63f20a5942a5b467418b461d594b507a12a2764bfa7aef37f71aaf1014cd2d271fefa0e06a505bcbd5b726481d74c6b453e2b4f54efa5bc2da36fb5f525dd7adfc9ac9fbc2e951412232a0266b9fe9a0c2d03b9d05e7d7d107f937eac30b576969e4bb3ddccef02fbdad55b741e", 0x7a}], 0x9)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003180)='smaps\x00')
syz_io_uring_setup(0x6fbc, &(0x7f00000031c0)={0x0, 0xfad1, 0x4, 0x0, 0x2f1, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003240), &(0x7f0000003280))
r6 = openat$incfs(r0, &(0x7f00000032c0)='.log\x00', 0x1, 0x10)
waitid$P_PIDFD(0x3, r6, &(0x7f0000003300), 0x1, &(0x7f0000003380))
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000003440)=0xffff)
io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000003480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x27)
pidfd_send_signal(0xffffffffffffffff, 0x28, &(0x7f0000003600)={0x25, 0x800, 0x5}, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x10, 0x3f6, 0x10, 0x70bd26, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8804}, 0x4814)

07:26:00 executing program 1:
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x5, 0x3, 0x4, 0xf2, 0x8, 0x40})
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0)
r0 = socket(0x9, 0x3, 0xfffffff8)
r1 = clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000080)=<r2=>0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x1c}, &(0x7f0000000140)=""/26, 0x1a, &(0x7f0000000180)=""/195, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$nl_generic(r0, &(0x7f0000001940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000000340)={0x15a8, 0x40, 0x800, 0x70bd26, 0x25dfdbfe, {0x1d}, [@nested={0x26e, 0x43, 0x0, 0x1, [@generic="94698c0c4b109050c086079582a3334f96c50d9e06d81c45303bd02a8ae336cb08a866a1fc133bcae7878d3f67958ad8806489e450ada3459ca63fb3b38308a106de8fa774424479b24fefa4b00db133b3e946d1cb5f0be384aa86e30945011039a05b15297cde4e79343b3311", @typed={0x4, 0x56}, @typed={0x8, 0x57, 0x0, 0x0, @pid}, @typed={0x8, 0x81, 0x0, 0x0, @fd}, @generic="a855b444774eafeb6f9f0c7700a8cdb3fc50235fd7ed7fe1f1c7d384a13d057bd0ec224465264acfcf7da6c177bcf0f0a641aa2d095332de79ce43d10bc3046f516c0a3f54de67addb5989ea61395b18433b38e3df73eacb8a581a071499f614f3f9fcd024e5fa63b00f4afeee6db73fc34f2460a1556f34cac6bcf17d9237", @typed={0x8, 0x8, 0x0, 0x0, @fd}, @generic="f171e832765f9f102d24f7354f4eb93e69f57af946fdafc091f208fcfc5b1aed365cc9bf162c3018bd0004d83ee5c0d96aeb53e1425bef0c735dbd42bf21aa3c9727bfeb8ea932283f9f35f0a590aab06afaacbd73ee7aab48e060e07fb47567cf9a658b4a63d227688ca6d9dc0efb18c90010286b9f7ab6fa92a8373e13c351f9e7901095bab6357c821112d5ade68a78705e88834bf86d4a82aaa8476c26d3e4ffc45f584173d58269b2d53feaec5a9b60347c49db87db4bd15146", @generic="c61ce3d2ce969bab013d6f0d9463c74dfd3ab3c128279f08c13ef0b3180433f1544e41f6d8f1865b526225172ea2ad40cd5d45d7a4e8d63f4266c9bd53afa06187d4c9bbd54d6ee801ebe18f9dfb1042a9c96944cd54adcc7f143a20f57f40018724f917b7650054a8c6ee5f9c66896866fec6ac8a461dc1b2bbf14f9a9e4c84c6b18731841d128679f0a929c6eb26c3a64fd2f2a6721be899bdc978b655", @typed={0x8, 0x47, 0x0, 0x0, @pid=r1}]}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x12}}, @nested={0xf0, 0x90, 0x0, 0x1, [@typed={0xe3, 0x89, 0x0, 0x0, @binary="46974379b439bf31f33bb5ccde2b7b95acc9dc0d3c0edcd55d695a3c231ebf9c9968424b430867c15bac0172acd7141a75f39944b1b836c792047ec834af2344bfaea8441a2e1dc780da842c7554c15fd46946c39408331dc5a425fcebd40861b5546d0ce7893e84fc07ded79ac88d697bc3b0f99e76554b97f3ce29e5046184c7777c0e050fc50ade90e2b51738056905122c16beb5ffc7040e6dddf0d706864613733320374d7dc2d9fc934674d329440a52c58339f3fe4083fc4ab2cbb626f0c1fff6e1ba3e620282d6bf148cc3c3b477f92d685e4a88297a66244c12f6"}, @typed={0x5, 0x18, 0x0, 0x0, @str='\x00'}]}, @generic, @generic="a918d98a7596d9efe9032b66194dcbe735439c1899fcccbffbc54c94ded9c52d3d3db4ffe0a5362790e6b72442833c3e3ce87d18dd0d3dc5b5f5dda6ab48069cd3e1535ef5fdcfe51603fe396631ca9aab077db9e06bafe5b327c3808fcdd8bedf377ce9ffdd2b85b348213750b7f8743de1adf9e811a7cf32ffb8e1313dd53b1d716c753fbb0617c35bc904ebf87ba2f2a0d9aff2af7968f094adc01b203aac1e5c055a16d2924050deaa7f07069691d7078f6c869bbb3a2280d3b3072a3ffa59f3fe1a4706bd0eb6d3d4914ac44aaed1e34fd439763bef", @nested={0x1004, 0x58, 0x0, 0x1, [@generic="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"]}, @generic="18b00aebc36b397db62f157a80975aff5f834d3ce794f2dbfc90476d59d66aa5bc8e18fead9585fca50543cb2b106aa484a09db4f64f463edc114d72465263f8531142a986bb44879285d124e4a6f3cd8948ea0e096b03ee61e68de20549b0ec386e08dc2119d0cb263ea6b7f68b69eb3d6967017b375c4c3071d05afd70", @typed={0xbb, 0x1f, 0x0, 0x0, @binary="1a3086d8092235ba55f8cbf08266f6393ceb55e92267ba20228587fb4be09487c9494423cd394cc47ac1190014e25bd8edb7c026a3131c87ef5a205810b77875638ff58c11331ed505e92daba8d3f82be4327deef326117e4a4ccf7303e0c20a2c919a9da88bb9e16a61b3984fd434d0aa08ba42655bda5636ac5fcaf9f3e4628b1106937c92cfcac588218bab605c9974bd5eb2d92c7e8e67d0480f59728387df5481efe149c6c78048493e4dd9d39ddfbc52e9f35484"}]}, 0x15a8}, 0x1, 0x0, 0x0, 0x20000081}, 0x841)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001980)={"2d381c7072ddee0abde9a2cb509059cb", 0x0, <r3=>0x0, {0x3ff, 0xffff}, {0x2, 0x7e}, 0x6, [0x2, 0x0, 0x5, 0x7fff, 0x10000, 0xffffffff, 0x400, 0x637, 0x5, 0x4, 0x1, 0x3, 0x3, 0x2, 0x3ff, 0x20]})
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000001a80)=r3)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x101)
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x81)
r5 = pidfd_getfd(r2, r4, 0x0)
ioctl$sock_proto_private(r5, 0x89e9, &(0x7f0000001ac0)="ceb3b56781e538b1db13d8f783a782")
ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000001b00)="8547be8cdc609b17d8aec6168ccb290e50e4dba53673c3627d4c0c17d37b94a222e3f55cd56146cb39bbb4d00db03013a1d241a33538f329de22b43d09ff74616e42680486a911a2a3a17a74261b2a9d99f592bdcfcf522a4247cf9b706e9a64279ac1ef4e2bec697c2821ae82ff69365d1a0d41d662e9891c8e805e882c03eb1b7218628a94b6229edd164c7a905ff5877339fcae8e47cf36ae9be494c1a99503abde317881f61568b14ec04004e2be783ba14d964e465fa57e321e67fbc743d2b57ab2cfb37e4d73050aa6624e8f784f")
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001c00), 0x80040, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c40)={{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@remote, 0x4e21, 0x1f, 0x4e22, 0x8001, 0xa, 0xa0, 0x20, 0x87, 0x0, 0xffffffffffffffff}, {0x10000, 0x3, 0xb0, 0x6, 0x8, 0x9, 0x9, 0x469203af}, {0x8001, 0x3ff, 0x1, 0x7}, 0xd5, 0x6e6bb2, 0x1}, {{@in6=@private2, 0x4d4, 0x33}, 0xa, @in=@multicast2, 0x3501, 0x3, 0x1, 0x8, 0x0, 0x2, 0x6}}, 0xe8)
ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000001d80)={0x5, &(0x7f0000001d40)=[{}, {}, {}, {}, {}]})
r7 = dup(r5)
ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000001dc0)=0x40)
perf_event_open(&(0x7f0000001e00)={0x2, 0x80, 0xf7, 0x3, 0x2, 0x1f, 0x0, 0x5, 0xc0000, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc1a, 0x0, @perf_config_ext={0x7f, 0xe3}, 0xa100, 0x7, 0xffffffff, 0x5, 0x1f, 0x8000, 0x1, 0x0, 0xffffffe1, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r7, 0xa)
r8 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000001e80)={0x0, @ethernet={0x6, @random="67e79013360a"}, @isdn={0x22, 0x6, 0x8c, 0x20, 0x8c}, @vsock={0x28, 0x0, 0x2711, @host}, 0x1ff, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xf5, 0x10001, 0x9})

07:26:00 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "ed38607723c6b4da253495b2903d3dfeb0200c3c3b62b2603215d3a87af385f7bbfc12a8de30985b4cefb766283f412a415d29e94b54da5aeec3d5a5b7bb1a08", 0x23}, 0x48, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/69, 0x45)
keyctl$read(0xb, r0, &(0x7f0000000180)=""/98, 0x62)
r1 = add_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="c404fa10336efc14e24288990df5b265d81802efd268fa1471e1913164882c89dfa3fa041c93478a093814a59a7aae9b2bdde98f400637e87dece2d73b3ae62605f51f43e04096a7a59714d3f3795087c5d3b6021ece5ebf6f4f5391e83e5117bdb1c39bab55339058f3c4ba50ff3d061f4ea0839bc0d0005a5350", 0x7b, r0)
r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x38, 0x36, 0x38, 0x64, 0x33, 0x31, 0x66, 0x62, 0x62, 0x32, 0x66, 0x33, 0x64, 0x54, 0x65, 0x31]}, &(0x7f0000000280)={0x0, "647336bd3cb9ce6125a040b2cc773d07a9411b3ec7baa0297767494694086232ae74cdb9d8a35c5abad1c2eded67189a0554cc19de096c95e6f76228b1b3110d", 0x18}, 0x48, r1)
request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='fscrypt:', 0xfffffffffffffff8)
keyctl$KEYCTL_MOVE(0x1e, r0, r2, r0, 0x1)
r3 = add_key(&(0x7f0000000540)='rxrpc\x00', 0xfffffffffffffffd, &(0x7f0000000580)="5791c4e05cadf6c45e2b24856376b428df705d68724d9e69e5357f89bb8d1f6d8cc0fd9cec53ab3eaceba925d94890892d05a57d8954d4e74cb882773f35d3e82915ce8c3dae9a056f978b85372c3a074b42fac6b6340c32b00196386aebacae3da847bb09d6d7fabe24bfa5945f864e4f3b5a79ab559480f29447c621caa0ba2d0dd785fd2b3496e94f5a5f8142ee2d37b2bece52487b325d6a24424e5e009b002a2ab4f6717ed4a656b7", 0xab, r2)
r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r3)
add_key$keyring(0x0, &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r4)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
r6 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x38, 0x36, 0x34, 0x38, 0x41c2644afea961a1, 0x33, 0x33, 0x39, 0x37, 0x62, 0x66, 0x30, 0x32, 0x65, 0x32, 0x61]}, &(0x7f0000000800)={0x0, "3061635fba7bce4c7a089d7be4b38f2e74e207c3aa659dfcec740dbb6a80d3d1e12deff96de976c119a41f67f6e7d8aaed093f7985297369ddd1be22521c6c03", 0x3e}, 0x48, r4)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, r6, 0x1)
add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="be7d6053e64afb5d39b360a9957c82cc59f4b59bade3db4ee9a6d5dac59ffb3b5d23f28660172eefc417c394b51beae8bbf2a5ad33c5475cafee66504f8e6c0ebe0e495e9eadcf3fec6853377ef54a9d527c603bf9d8eb134fe81f1c7f4cbe80f5425a0b747f29918a60f60ca378eb29fa56f70aa94793d76cfc3cf8c05b1dc4d5cfa840705ee0f85b6479f0fe12e4ad2c5e6394d605ff85fd2f3b2823ae3228b433", 0xa2, r0)
add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
r7 = add_key(&(0x7f0000000a40)='pkcs7_test\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)="9dd237371f8af68728b5c5ed55bd2ec1ccd0bbb22edefef5679166ae95c9e71e81176c0560cc0e2977c5cd99f3b6346679bd12ce91c957ad4631b7abeb466498291f691f548f396a826e82eed60c949126e06d", 0x53, r4)
keyctl$KEYCTL_MOVE(0x1e, r7, r2, 0xfffffffffffffffe, 0x0)
keyctl$unlink(0x9, r1, r0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000c00)='},$^,{\x00', &(0x7f0000000c40))

07:26:00 executing program 3:
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="28ba19984a3e3005292fdee14cdbca3637c650f7a38f3a6a4bdd25c3df2ed0f6", 0x20, 0x5)
read(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001040)={0x0, 0x1, 0xffffffffffffffff, 0xf17})
r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001080)='io.pressure\x00', 0x2, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000010c0))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001380)={{r0}, r3, 0x10, @inherit={0x58, &(0x7f0000001300)={0x0, 0x2, 0x3f39, 0x8, {0x23, 0x0, 0x0, 0x7, 0x7}, [0x7, 0x3]}}, @name="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"})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000002380)={0x0, r2, 0x8, 0x7a8, 0x2, 0x4})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000023c0)={{0x1, 0x1, 0x18, <r4=>r1, {0x1}}, './file0\x00'})
bind$inet(r4, &(0x7f0000002400)={0x2, 0x4e22, @multicast1}, 0x10)
fallocate(r0, 0x20, 0x2, 0x5)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000002440)={{0x1, 0x1, 0x18, <r5=>r4, {<r6=>r1}}, './file0\x00'})
write$cgroup_pressure(r5, &(0x7f0000002480)={'full', 0x20, 0x3, 0x20, 0x4}, 0x2f)
openat$cgroup_int(r1, &(0x7f00000024c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002580)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000002840)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002800)={&(0x7f00000025c0)={0x210, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1cc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c4, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x16a, 0x2a, [@perr={0x84, 0x50, {0x3c, 0x6, [@not_ext={{}, @broadcast, 0x6, "", 0x42}, @not_ext={{}, @device_a, 0x7, "", 0x2}, @not_ext={{}, @device_b, 0x4, "", 0x26}, @not_ext={{}, @device_b, 0xffffe6a9, "", 0x39}, @not_ext={{}, @device_b, 0x9, "", 0x3b}, @not_ext={{}, @device_b, 0x7, "", 0x24}]}}, @ssid={0x0, 0xa, @random="9c4fa8f20330673d0ccd"}, @measure_req={0x26, 0xfd, {0xa6, 0x1, 0x9, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x20}}]}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0xd, 0x0, @random="8e46bcf31f5fee4150"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x4b}, 0x7, 0x1, @device_a, 0x9, 0x8001, 0xa4}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9c}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002b00)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002900)={0x1b8, 0x0, 0x201, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc72}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7cd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff8000}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40408c0}, 0x84000)

[  192.319627] audit: type=1400 audit(1727076360.586:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:26:00 executing program 7:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x7, 0x9, 0x3f})
ftruncate(r1, 0x800)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r2}}, 0x5)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r0, r3)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={<r5=>r4, 0x5b, 0x0, 0x1})
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[r1, r4, r5, r6]}, 0x4)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
r8 = accept(r7, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80)
r9 = dup3(r8, r4, 0x63e683608f0af6ca)
ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000240)={{}, 0x0, 0x8, @unused=[0x1a, 0xfffffffffffffff7, 0x5, 0x5], @subvolid=0x3})
r10 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001240)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000001280)={0x0, <r11=>0x0, "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", "71ff25970df27a41d69f8eaaf3f2971a3b57f09b52abf6477058209ff28eae5021cc60b266bb8d26fd306c1997cad60ca4a2694be2a2c1dc6e4dc362c9d84e31ab557ea8876f51313e133b19e10b0e7f132b483e928e393ae07abec06d4b9eec3ad92a3753e08115f64a1310ae8fcd3fca6005bccf06aece1c9c4a461bf1f4de85f0dc5d2775a74623676e47e180a65241e3486103f5940b7028c79bb51e962723cde2dd71674705835b2daf87310c21492c47c4c28d601913bcd1db6f30ab5ae2f46df0c52a4020029dd9150f04a4691ac1a6691449194261e0ff6b39cff033e96059a253c5a2ecbcbd5ddcab9685ba27ed72e7c2c3fa31452c334559d95ea0996878982bf355de47e51d2135e594e65ce2beab0db88b38b3966abc68e52f87f7f179e054500d24cc7d6d520ec2a909ab2f39479f531b286eef486959001cb4ff3fde4cd76405f713848a136a585cd11064a6cb825409a981b86ba9e4e70512a0e9e24e581c5e4426f8a7aedb7b8cfd380f772a5591cc53e33567168b9179cc0442178eeeace54addb0cdab817ae930fac9e6125d53334177d24376d0d7e2c0b839d447ad751ebc472e6ad5f5fa086d999bf8f29396273c3998ee13eb81a7a48ea333726d99c260ec78b892cdaa9e1d64dbe70b6e0bd4f627a43e7b9ec854fc780662b7e801a703592e9778cf3a0020bb9a415ca818258154ad357779cc7c93bc1e9227f136d6f6b4d68baaaef4391e603bdec39b036c797549a2cf641f3b73328aba31c875bd5282a9875ceb72e2c0720a5d43aae093f1c534fe8ff9473372b15a9d6c1522d4c10d654f66ad5d20a0b664d83a45e1fb632231b56ef4753ccdd035fbb3bdfc95df4910625f9c7c01416a908534fa4f63cf9c47979a3c89cbaec998c1dee6e2b7ca83504fffe0629e1d6e6e8ef931af895397a1129783d0ac948579726e82af847254b2ec2481df57f6ec007767d5e7affe3605efd82193e64346c3d24bd215ab1d874da89ca3b8c07205945f03781c68dffd36bed384c189230d41380f801651f85e96eb1ffc441a95e0c16765ac7d0c182c21ca4d96656123ed9e77b2c4ef1ea8dc825cbda986eec5bf03e255b45150eab286b2fadb594e1c13ce2ca4eedc246f164e5eb1d408885635d9f3cf7ae2b71f338115c02cdca5cb20cbadb0084dcc50ae2310a9267e015b5f23415f2f105419ee41aaa83f0bfdba092ffc032d9bbf43483f53eb54885b98af8fe0086b48354976b3cccb44cb03f932e371d98507742f4d0a99a65de69377dd03e06032020a26b9ccbaa8fffd179d5d4cba665e36a79cd822b47cefdfa1bcf82c44f5c28b59052ac05cd00b86f1f8e0cf4fd083342bd6f7deb4ca53ae911f52beee27dc9f698f53ee63332d1c84c5b51c224eaf5e664590cae1404e6df283edf3549662b357c8caa20cbcf7df05d3cfb40915dacb39544696f7bf479fd3fbbee5900b48eb2c5740ca96483f512b7c69f27550ef77b23c626a187fa57976b3f7fad99aafc3d24c1355cafd7a2805015d9791dcd022e5114ecafae5fa2cfc6166622855c92dce21fee49b8976a211be79f24b3296060608f07aeb589c79295ef5e7f397069914358deb0eb70a90fc8e226ac0a97e299bb7f2fd10b83e278c760390271cb919f83a634b9a92ed905844d17b70f68206c4188b083367051f9dcd01368700475a99c9ce8e90a8f12cad72f2f4df01f2586ba2158d1ff84d0dc75b8965034920e603c81d8e78f1541f5c5ab8139cd50a9369ede0a2ed4396cc3af233431653fd38b1fee6a3616511fa0278fc6062d646e626ac7bb6c68d9b4ed5f2d3461cdefd8ac97059356e18532ee21abf91306320f409b3a4e967390000c33010c9f5ee6c5757b073213e9d412e9d84f5300a59b101bb30e2ff74c74295bde5c3c5fd3e59dc3a11321817904b5b4fea00dd14ed45e7d6aba35ba2440f6468d1c15c470084e6f0b88ea275c6b2eb953c2c218ce1732a092b84eb9de2c093e6326816393b8b3648ce3808bd3c94e3f2ad42b04030698669a75d74f4c011efebb86813db9f06d61fb35935b0727203d9a7fdfd39b49b079ee2092179e5314dc45c01d2fc4a4927a1e156e25864c45106fa3ffa3e8951941651d2b734d5d7e7973a5e9874ced814ba22b99a4bec40ad69983feda97489a5d58a209a1f5144b2b7fba4405525629fec506dd787d2148d46b6c22217a0132860c04e0e00c2c7e44d35d9aeb90c038a845ca2081d945684c5784d3317a54cd39de77a55628c0b33b28a7849c76c0d08c986d2efbb6ba748688d9accdad709923080a82ad85f301f570ed091e95dd8723f167639a3e1953ae0d2c436ad367837235323a7221a40289e8c3706bc3ba446771c804ee8170ac69543caf9f2095d7147969933edb8689145580f6a060a5e38a7688bf9fd6a6323ad65aab34671a60ddf0f2d458d4dec9b61cf8ef095404eaf3c2bce17d984752ddbe6c6c27c7b73e5de94de669a978b50c70a8a6616f8a249ce7a9c6c4a2266302b69b5ce8ff6d49d2d452bec01500cde7b6bcec6eef1cf236ea319b143117df224a9ef8341487dcd4202dd8dd0d5e0dce8cf1bc56c378717f07e4fc7ff54e2233f05487583c3a06d7764ff8f4bb3609077f8bc638614ddfed1848adcba73870dabaeeada200d5333b5453d997d57ba7c3b3bd3b6abd762d2028ab616432b8d1239169f00f50a52e225e4ffdd73a3e1596bf19bb925198ecfe7967561446349ddac93bd415f6d3c6077591cf5162badc8ab5808c7374be697827aaeb1c33814b87c463624574cf234e44bc32e3d0dceccf46ec1f1b4cb5897c66db2a20c3f3881d88ef11bd2086b57dbc0176bfa9a175b5f43fd00fd07b1bcb3179c9ca32f7b7efe09bbcb96807e0cf02cee912d5b1151e8947c906e96cdf450867bdc5f7353e6857868087b89f86d0577c59296745e414e267cecce8b6f1faf98e436f19526e7d728ca5a4fbdcb9d68c335849dd73c795d9e9ebc445cd85b9031fe4a7c8b60ca29b6e665d810b9b389f21faa2dff263f0850ef400083ac4084221dc46c92e50133fd5eeb56be00c3935199b7d80a10da4712c4580df894d73fc7ec1d72c928a6d1b824b25f72ed2bb762ecd7ed4f97fb6725dd84ae6d7606e64a49d860bd7315554524e39f40de17182ba48610f4576bc64cd7208230be324b5a85670fd347af9eb9a56e282c027ceae914d4bd4c68d70e0f94ad57764ee2745b0f00830460ad9f2a3def095b78f9524d4a8a550bc1c0d70d74c1d5f5b926747c25ecfb917fbfb79248c30214a3ac047dcb08294b0fb5b51469fe49c9393499d48f9f170ba23a2815e8f86741704eb48dff7fcd7de5edf1618ee052f1079a1805307fa6030768e2126d2db319f905a0bb1d009b896adb35f77dd457a7332857a2a362bcabf14ae9f7d331887d50ee4361afed9a4d6eced04ec3ca22ddd5f141e318980cba2d4fe09088471cae660b3c3e5738d0d3599f9f8d1babc73d70beb0423ea64b755d43aa52fffe9101a12b4c23e4c7301a3aae5129fccfbb0113e1a2cf41e7b29d069181664ccc2ad513e4164a37f80bf02cb2a03972ca88b6fbea12604a59380629156bcb50f41b93d7c63c9050262b30cd0b05a7f1743bf0f2fb7401fe0ec369c43d060e32cc0ec8299d7138aa63f9ca5d742e7884fc8e5aac691ab620d74862cde744a62f3b06b42114f5b04089392e67027d2516e60019fd2466502aa2ae48fce4f7ad2d2561d0fdf8c606965ddbb855f0fc5fa3dbc4810d498c1b977d73ef6fef539e00f85d4f1539a01c3539d71aec407065e3a1bdf89dff872898a182c03446f69ba81288ee7b3db47767b56f48348bed7e4dcca3f409f63c3b89d4c4309d835585f3f3bb81f0fab0cfec6ba571b465939a93ff813e42254d69e85059151b6dabaf14528dbbc4a7323b861af2c2784ea445bf5ac5bfac52ac0367a9c13397fe6ac5ebd23c75e2b34cfe3838a9cf01913a4850fe62929abd108669b1e39e462251298a90b51a070b2619870e031bd58b89de2fb4fcccfa74f7f6a0ba374079fb2dd3e7ac2891d697532f8bdd24b139dbf6d95486b15597967004b0c38e99dc062cba151f4179125072b1db7fae6f09d4f16b6f031a1bf67274ebf392ef5a780c824422a5f0672e12c75824c0c983a42503bc9c49c19784ae0d2fbb4c4579551556595e4be32e47518d86a7661f68ae26a8847bfa038f889343e4f70eb877b0169e5aac01e59dfaa9b15a3b255d2e0bd37bd2594a9befaa479c5431a91796bb9d5d67cb1b7dd12d8586fd57829ec8e3ecbb6f7a373063ad068a4ad392d51f1158df2c8ddb082bcbe891033b387c1bd2368b8670b30fad3492f58aa583ae0613abe43a46e20003bde6e1f44d99cc1e4d974c4df94692c8fba9db68013aac0aac57f1d6aa598a0fb011bf2feeabaa63f31a34a09e7063247ce9f79e88c3e34dc6a4a747ce701a891bd427c02bdcf45ba5e1ae1d2f50103475875170c09ee972ad10e224377dcb44b868ab1f4fec5c4ccfa6850641b1009dd148c8e8306d23966ae9cc33f7a3fee3ab795f4db9f57bad7cd23a6c405f64e152aea2b72955ae1b4da6d3d5aaddcb01874e9ad942d3c70d67ac7541367182f3e686c549d8af14cc1d5f727bcbb79ab0284a64d18e09c303d62c03410988141bd1b5ad1f9eda43d30ed98764810225aba1617ef20043db09aaffd72df831cf112108241ad7ff681a9e28bb7f7a2b34ffa7e462e2f64af4636ca645773ac72142280b50c945a7aee88bf94760a0870157702de56282f3fc2458509db131701936625c1427d8b0de42615edf2072dbe545d7c8e82fd63192e5df01edf8463002b5462b5a90710e7a3a7ef60b39aee46a17409ca0d97fc3b9befe37ee11d83449c6b8b05e4bda862dd648fc796cb36943d634257753c5541e5c7261c220b9a9f995791b7e1011478e57b4a88d508c81d87732c45f7d37d7c5b8ef3f1143d9c4f8c273fc3a8d6b312e3f1aeaf198e627d9b105aedeea0aa132b9f2211c0fc48d4e1e5f367a201ed38219192d86628cedb65b6c5f3b5485bd43f2f9b65d035f8491ad3fe4467500b9bb8b1f485a842edececabbd3635f3f342e74ed19fb15c9161ade474438938b0ee1b001ca0e1193b7994ec8af08a74ce36f91d44768c197d1eaaf5dfa78b9f557130e7c387d2a8c399be41ff35f505f55cbb178ede44fd4818819d8cd538eb38538a591c33b34da4633bf9c271fa7293e2cc8d2ca44047f40ad66c11b04a2132bcd6615f00e996b6244f9d778e04df685ea20f17c9c18dc168ebfc02bc30016a9a2e50119a89090d4321469a1dca9ec06a3343862c6bda09cb64dfe8335201c204a73c8d26349c0a408b12a1e1c8a7ac87efde59ff032"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000002280)={{r11, 0xfffffffffffffff8, 0x0, 0x6, 0x8000, 0x0, 0x2, 0x6, 0x8, 0xc58, 0x1f, 0xffff, 0x0, 0x1, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

07:26:00 executing program 5:
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xe6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x30}}, 0x88c4)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x4, 0x70bd26, 0x1, {{}, {@void, @val={0xc, 0x99, {0xfb, 0x4c}}}}, ["", "", "", ""]}, 0x20}}, 0x20000040)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x24}}, 0xc015)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x804)
recvmmsg(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000600)=@tipc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/69, 0x45}, {&(0x7f0000001700)=""/135, 0x87}], 0x3, &(0x7f0000001800)=""/131, 0x83}, 0x9}, {{&(0x7f00000018c0)=@nfc, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/132, 0x84}, {&(0x7f0000001a00)=""/25, 0x19}, {&(0x7f0000001a40)=""/48, 0x30}, {&(0x7f0000001a80)=""/82, 0x52}], 0x4}, 0x9}, {{&(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001bc0)=""/230, 0xe6}, {&(0x7f0000001cc0)=""/145, 0x91}], 0x2, &(0x7f0000001dc0)=""/79, 0x4f}, 0x1}, {{&(0x7f0000001e40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/23, 0x17}, {&(0x7f0000001f00)=""/114, 0x72}], 0x2, &(0x7f0000001fc0)=""/198, 0xc6}, 0x4}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000020c0)=""/90, 0x5a}, {&(0x7f0000002140)=""/25, 0x19}, {&(0x7f0000002180)=""/70, 0x46}, {&(0x7f0000002200)=""/157, 0x9d}], 0x4}, 0x10000}, {{&(0x7f0000002300)=@nfc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002380)=""/9, 0x9}, {&(0x7f00000023c0)}], 0x2, &(0x7f0000002440)=""/206, 0xce}, 0x4}, {{&(0x7f0000002540)=@nfc, 0x80, &(0x7f0000002980)=[{&(0x7f00000025c0)=""/143, 0x8f}, {&(0x7f0000002680)=""/210, 0xd2}, {&(0x7f0000002780)=""/201, 0xc9}, {&(0x7f0000002880)=""/213, 0xd5}], 0x4, &(0x7f00000029c0)=""/242, 0xf2}, 0x1}, {{&(0x7f0000002ac0)=@generic, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/59, 0x3b}], 0x2, &(0x7f0000002c80)=""/113, 0x71}, 0x1000}, {{&(0x7f0000002d00)=@isdn, 0x80, &(0x7f0000004180)=[{&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/200, 0xc8}, {&(0x7f0000002f00)=""/79, 0x4f}, {&(0x7f0000002f80)=""/221, 0xdd}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/76, 0x4c}, {&(0x7f0000004100)=""/47, 0x2f}, {&(0x7f0000004140)=""/44, 0x2c}], 0x8, &(0x7f0000004200)=""/237, 0xed}, 0x17b}, {{&(0x7f0000004300)=@nl=@unspec, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004380)=""/189, 0xbd}, {&(0x7f0000004440)=""/129, 0x81}, {&(0x7f0000004500)=""/26, 0x1a}, {&(0x7f0000004540)=""/158, 0x9e}, {&(0x7f0000004600)=""/95, 0x5f}, {&(0x7f0000004680)=""/166, 0xa6}, {&(0x7f0000004740)=""/195, 0xc3}, {&(0x7f0000004840)=""/211, 0xd3}, {&(0x7f0000004940)=""/111, 0x6f}, {&(0x7f00000049c0)}], 0xa}}], 0xa, 0x40000000, &(0x7f0000004d40))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004dc0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004e00)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000004ec0)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e40)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f40), r0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000005540)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005500)={&(0x7f0000004f80)={0x578, r7, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x902c, 0x49}}}}, [@NL80211_ATTR_NAN_FUNC={0x214, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x210, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x3c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x7c, 0xd, 0x0, 0x1, [{0x76, 0x0, "74aa7d159515b883dbed1b75d09c1b68bd23ba017287aa05476669e41e7960c5c611f26b214cf39b44537cda34e8102e9554426df067baf78608bb7d49ce7bb58cfc61f49cb7c681729bea4379e0adc0ed43617b87d71f660939ddf43df25673a334ae72aff815d278169993ac2821054d70"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x10}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf9}]}, @NL80211_ATTR_NAN_FUNC={0x1f4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffb}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x70}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1c4, 0xe, 0x0, 0x1, [{0xe1, 0x0, "2e0e92f517de399d5c9756be6fc9830a5c3e52342e92330b1d7e223aaafe5d810fdb0e6d58ccfe7c0333dff39a669b2fd5d8a6b5c388ec7fe55e9dfe4ba514575821211c8766fe6ac2f4d43e545fc87324bf42c01ff0eede93320a62263174ed2a2340dceb557ab943fe0dc2aa4339edb4ffc3b872998b28a952e60d7660460b231bd87a9b67bb1734997fc187ba31531a872fe75216dbb49048b93a43f1ee1bef84762954c572fda404f7290305be15a3dfa1e1c102a38e00de621a50d63b6b700e5c4b6a2046712eb9c5989e4fa2838ccc9e6a6356562f42876a4058"}, {0xdb, 0x0, "bc66a2f5ac790a713563f8a87154f7efcb7f92ff70e2737c12d7b456c40df4bcbe50e76d9ec3e449438dc696a9e056135bb11f75ef60a753600454048a767764ddcbf09075b6817e969727c7a66dd69e3d9f1a5a239c0af889c88ae4332e7fe61d97a5f4a2d1663fe173e3df267762a86ac287dbf20f181b22236edb01ce82bf2369cf336f54013002068ba835f1bfa6125c6b1fd447d37f1c2d2054ced6cb436d05c1ad3c81dbeee0b95b5e00cdd55d090e650edb6694492e95790a961f6f9057cb03bbd3ff6f91bb41e549395584d4a3f0891a8b83ef"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "89f1ef98f8d0"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x70, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x63, 0xb, "1fc23e6dd0467e1723449991be0e4160befc200ded15afbd1699e0277c212e79ca2188ed8b9cf4a0984ce1433fa1c28d8fab0ab04009412d3fa70aa62e7f19770f2a3d73c3a7f003f1459983efc9f68deb48ca34466aced85a467e40b5cd94"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x101}]}]}, 0x578}, 0x1, 0x0, 0x0, 0x4004011}, 0x8000000)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000005640)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005600)={&(0x7f00000055c0)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080)
sendto$unix(r4, &(0x7f0000005680)="6478c5b08e4504d3ce82fdd2cf87568dff10553686237d18414bb77b452a1a53815fff67f4918236e0dc52e4dc379073dcc59cb79994", 0x36, 0x4, &(0x7f00000056c0)=@file={0x0, './file0\x00'}, 0x6e)
close_range(r0, r0, 0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005780), r4)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000005c80)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005c40)={&(0x7f00000057c0)={0x444, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xcc, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc4, 0x2, "df04ec075a539c25e5581cc9da9488b71c4c809e498779ffd33efb09f3c4eb591368e0a6bcf8902220a206732d9577675dc3eaa0e4e171b9c00a69bb9274ab56ffe20a6d2ec44c06a7d1047bfe9bc6e9038acb099f26307f9361c1ebd10b85e7180159ba016c677291b87d8df65ef7100179011b20aa2b469a9834807f8aa74bf50a8a211bad1a4ca64e9e2af224562d59437e5af7335ffef3302b71d6a42be829de690dcc036ce9cb2a0be85ee7cdafe26c1d68bb5468f347659e8bdd9a6ca4"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x110, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xfb, 0x2, "bb90702e3af60c2208723753930eb683f919e8263d2a590087508f462e8cf2b2452e3090e0e694292fb6a16b235e65fbcc11a392905da9ae6ba1e1a8f2a07d6825fade566a3f93675c56c1cb882e84a601be148103ef29ccd610d1a9ae3d29a50f6cfd0019de429ca32db9783e27eff975d8fe6cfe5cc07788aa5e987037280f98f7423fa8c257ab50ece5e5db1525370f8def2e49c8d96d0d9fdc5bc3e5b61901910f7ae743561dd66d521722e9b719be03e18568b3ec18c31ef44a8549f2c759c256bdada8fadbcb3cafe8a56081de6b1e57d0475985d72157fa822f7b094434b38edea065888d94bd9524aceed025c25980fd37d1d0"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x29}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xcc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x23}}, {0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb5, 0x2, "071e9d3fe924390760d5fc3e8063dfbad338ad4720159b369c4b1a7236d7ca6f22113dd8fed8eb18ee3e0f7eed771f655aad74e9ca223f38044812c9dc7d9c96a634dd051b1903cfc54a933f8ee774351fe38e503a7dfd1278df6e8e9d3b8dbf3cc5649005b135951c812b61d1d6c85fdea32cee356c5edbe864331980b41aa2db424eb45cd5ebe505592074bfa5f24fa11a0877513488dca9c2837a955531bfb3cf22304cb9978bf0c3ccd5c0f18497ab"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x164, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x59, 0x1, "2e728631db5966eaa20dc1c2c2a9ecd5b067028fafdd404ff289685943d90aa582c7dba6448c83d4f2fe1dd52a11fe4046abc0d82170359bda5801b2200d7ac632b855d52e3d6935bf951a9dbe3cdded6694743c05"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2000000}}, {0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xed, 0x1, "557d34fa5613e1648d55364c672710aace7fad286d2b87631fab3c5d30f5bbfd61faef1aa8f5962e846d4b4aa5f6810b78c3cf6fce085e4f9a2fbb5ddb630d44f112202d99376da7664638f752b3fe417c0ab73b155cc73bfaedbabe9be382ea22489a83a3436fb2521f5e0a13158a14c51e75d88334eb4447c1f0905c78d51f9a82e694b1f1373c7a80c9bcf0c09a89ba0e1569b4db43fb718dbab7eb3e5c03718f86392a2f9c7f250e361c4ca1bc0e53d13c91302cce3d70e1c70029070c476b3ac842bd919a8af99b8f12cdc7b957df2be7bfa63b2276fc880915951db9c41f09f054d44b0ad9ad"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x444}, 0x1, 0x0, 0x0, 0x5}, 0x10000800)

07:26:00 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x16000, 0x108)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x406002, 0x19, 0x10}, 0x18)
r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x3f, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000180)="f9f28c189a288a5ae19a7d36601bd65d25c739793545f861b1f0ab43f5fdc3bef13f5398711b961de47d49", 0x2b, 0x6}, {&(0x7f00000001c0)="823e91bd0e36881e0f3d98a523d2825fabd266a935724214813f9213777108c37aa571d00637a5ae497914b4a26d5135fffbe666cea8c85e5496f07fea7b0a9e227306e7aa5e73127107b5d76075afcd53b833dc7ad30433c9f712f206adbb2c044d", 0x62, 0x3}, {&(0x7f0000000240)="395a58bba1d8d04067c0acee107c8bd269d3476fd54159a97dc6bcd83cd73ebcb7c699f268499ddd5101cf66632fe87871244c8edf10184ff4169da3727949094a82", 0x42, 0x1}, {&(0x7f00000002c0)="a131c9fa22c296e1ba3027d6432c435f9c20daff86282d227502d95eb58b3cb39cc43a38a606325818a4c69c652bd17322d3275e247291c600f5a231ae39f4b5af8397fe3e761a88e96bba327e38f46341c3a73a369113fabc825b672285935cee2cd18f0a21854f3223694f6c4b397acc8e4b25029a1e520218107d2ff1f2a29ee3250dd5ce3168fe997535be15c9f6d0e99db18e71f0", 0x97, 0x401}, {&(0x7f0000000380)="919146c907120cef3332", 0xa, 0x7}], 0x4000, &(0x7f0000000440)={[{@stripe={'stripe', 0x3d, 0x74a4}}], [{@subj_user={'subj_user', 0x3d, '^^]/^'}}]})
r3 = openat(r2, &(0x7f0000000480)='./file0\x00', 0x90000, 0x80)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x50, r0, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x2, 0x0, 0x6, 0x6, 0x18, 0x1, {0x2}}, 0x3)
syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x1, 0x1, 0x1}, 0x6)
r5 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x200, 0x400000)
pipe2(&(0x7f0000001ac0)={<r6=>0xffffffffffffffff}, 0x800)
r7 = inotify_init()
r8 = openat(r2, &(0x7f0000001b00)='./file0\x00', 0x22000, 0x0)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r10 = socket(0x3, 0x3, 0x1)
stat(&(0x7f0000001b40)='./file0/file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r2, {0xee00, <r12=>0xee00}}, './file0/file0\x00'})
r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r14 = syz_open_dev$vcsu(&(0x7f0000001c40), 0x29, 0x4000)
r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="45696a28e79644d6fe81112765c157667511ae3a116707812ed7383ec8388a88e14a54f2c89fc7cfe71750a494570410f1c167db12", 0x35}, {&(0x7f00000005c0)="74b0553c2c6da4d81a2a1b538c1f5d8d06a9d84af3012aca0b401ecd0c25479c0bcf243707ed0148ba18c327da75a2cdfc3d82ddca4f779689769d2f34cf0fe9888c5713034c881b444e5dbd74d00202545894c781da826054cd798a683bb3a35a3b848ef8cb9904f76d39c3f9", 0x6d}, {&(0x7f0000000640)="15e4bd0a20dd2174b6b670129a19ba2b893af1c4de79983609546486e8a273a22373b89198dd63eab074f9a772db4200d4fc8d11c808f149fc870985db77c5218bcdd749cfad4e4f2f2e6a9e65401e7970f103ed072151b58e136d87a7cab50d9f5045d174100a246e391f1aab7f95834d1809fa9320f4d59f69", 0x7a}], 0x3, 0x0, 0x0, 0x40}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000780)="705b2a3b33695def1808920258553dead4c90dccb937b12d335b3812d7e46836e9dfd436efb6a9d6d50efbebafc65b6bc95e1b2354b8213ea9e0082cb60f58e18d2bfedf32d3602f3eff32a54d46d3a43892260b75e25c2962618b97f285fab0c3823b73d0293be82e32a1c3871536e78e5418600307547dadf53cd7ac0c07984559b20ec54e806e7d8c8a4b379f3e90e245c24c3c895f8f89fd909cd7722061effc7a30454a", 0xa6}], 0x1, 0x0, 0x0, 0x4840}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="13535c7496575811bd8d87d44d13e468c9026aa5a5b46aa9f55df0e7bc734a3135b314f2aceb9a9b1e67eff7", 0x2c}, {&(0x7f00000018c0)="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", 0xfd}, {&(0x7f00000019c0)="196fa3fa98c602e2e78030ad8a18bdc1684bae1a48f8ea10bd25c388019da0815ad2e4fe939451d8ff64e54be08dc561ed423d227795c736d70d8e171f6d78b26dba3c35605d8200791eca3d7520ed2c58a7e2", 0x53}], 0x4, &(0x7f0000001c80)=[@rights={{0x2c, 0x1, 0x1, [r0, r2, r3, r0, r0, r5, r6]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r7, r0]}}, @rights={{0x1c, 0x1, 0x1, [r3, r8, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r9, r1, r0, r10]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}, @rights={{0x24, 0x1, 0x1, [r13, r3, 0xffffffffffffffff, r14, r15]}}], 0x150, 0x88}}], 0x3, 0x20000095)

[  195.756139] Bluetooth: hci5: command 0x0409 tx timeout
[  195.757948] Bluetooth: hci3: command 0x0409 tx timeout
[  195.760901] Bluetooth: hci1: command 0x0409 tx timeout
[  195.762355] Bluetooth: hci2: command 0x0409 tx timeout
[  195.764928] Bluetooth: hci4: command 0x0409 tx timeout
[  195.770733] Bluetooth: hci0: command 0x0409 tx timeout
[  195.776430] Bluetooth: hci6: command 0x0409 tx timeout
[  195.883484] Bluetooth: hci7: command 0x0409 tx timeout
[  197.803588] Bluetooth: hci6: command 0x041b tx timeout
[  197.806042] Bluetooth: hci0: command 0x041b tx timeout
[  197.806615] Bluetooth: hci4: command 0x041b tx timeout
[  197.807144] Bluetooth: hci2: command 0x041b tx timeout
[  197.808980] Bluetooth: hci1: command 0x041b tx timeout
[  197.809739] Bluetooth: hci3: command 0x041b tx timeout
[  197.810263] Bluetooth: hci5: command 0x041b tx timeout
[  197.931526] Bluetooth: hci7: command 0x041b tx timeout
[  199.851476] Bluetooth: hci5: command 0x040f tx timeout
[  199.852092] Bluetooth: hci3: command 0x040f tx timeout
[  199.852668] Bluetooth: hci1: command 0x040f tx timeout
[  199.853185] Bluetooth: hci2: command 0x040f tx timeout
[  199.855928] Bluetooth: hci4: command 0x040f tx timeout
[  199.856803] Bluetooth: hci0: command 0x040f tx timeout
[  199.857330] Bluetooth: hci6: command 0x040f tx timeout
[  199.979478] Bluetooth: hci7: command 0x040f tx timeout
[  201.899479] Bluetooth: hci6: command 0x0419 tx timeout
[  201.901544] Bluetooth: hci0: command 0x0419 tx timeout
[  201.902048] Bluetooth: hci4: command 0x0419 tx timeout
[  201.902583] Bluetooth: hci2: command 0x0419 tx timeout
[  201.903091] Bluetooth: hci1: command 0x0419 tx timeout
[  201.905946] Bluetooth: hci3: command 0x0419 tx timeout
[  201.906482] Bluetooth: hci5: command 0x0419 tx timeout
[  202.027593] Bluetooth: hci7: command 0x0419 tx timeout
[  214.303899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.304641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.305749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.398661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.399349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.400594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.559136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.559962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.561131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.568014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.568710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.569805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.642994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.643794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.644985] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.665473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.666191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.667952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.712716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.713653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.715027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.732618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.733309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.734523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.818330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.819294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.820882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.847518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.848311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.849535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:26:23 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
fallocate(r0, 0x0, 0x1, 0x100000000)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000))
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x18, 0x2d, 0x12, 0x16, 0x2, 0x5, 0x2, 0x5a, 0xffffffffffffffff}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$incfs(r5, &(0x7f0000000180)='.log\x00', 0x400000, 0x20)
pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002ec9f00"], 0x24}}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000610693a3d2e88afb4d525081f3657e8ce4c7e49edcd5d1632f7ffb9cec99c04d0a2086e8b3b6290eb38914e2dfa517f2dfc229c89490bcd0431f4fc1f039d34a9688cda36a74be060e620255592b71c0c965ff032811bbe8d8ae4b7f4d84057db3c7bf75ea2086370cf924725556a3d395fc3602b40f67d55d4c8aa6b1f8ffcd6cd198fc1c919adec46e750a88beca999fa1772127c13411e43e0ee447aa2b61cf38f967c1cae41bf4e06f06b4be24f8453c03d77cbf5b8d048f99b80bda9ea6c2649590dd20f0dc1c612f949ed8fe38d78f07c78c5bb03d0976b4d7c3a7fee064bb", @ANYRES16=r4, @ANYBLOB="050000000000000000103100000001012100", @ANYRES32=r6, @ANYBLOB="20005098962069ffffff0802110000010000000000ffffffff00000009000000"], 0x3c}}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0xb, 0x2}, &(0x7f0000000040))

[  214.902060] audit: type=1400 audit(1727076383.176:8): avc:  denied  { open } for  pid=3891 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  214.903824] audit: type=1400 audit(1727076383.176:9): avc:  denied  { kernel } for  pid=3891 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  214.927275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.928100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.944184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.946423] hrtimer: interrupt took 18174 ns
[  214.968801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.969537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.970639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
07:26:23 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="e3af9b7c", 0x4}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000014000b0000000000000400000000"], 0x30}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)
sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000080)={0xa, 0x4e20, 0xca9, @private2, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="47d2f18f0bfed828d9a99acf76b9ab4990fc2bb19bc01dab55124f2a1e4dea7dfefc4c5955185a77dd7ea4399f06e522cddf53d6d42ca36baca363dbeff6abf73285a2314e3f39aef3720e1b9969deb7e996d0ba3165a9f0fdadedf735d5b6f2b1ed1d758093b5341ef269130d8d04ea4c6e55aa5b13341ee853e94439fad7e4ec0b07820ec6307c088b81b9962a8f93f73bea3be99f62b07c294e3593644ec4d14c97c306", 0xa5}, {&(0x7f0000000180)="61baa308f61f51a8f0d74b5c31f401173f9339782cbdebe56c435b44a9e1", 0x1e}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/567], 0x230}, 0x4)

[  215.095749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.096803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.098285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  215.103913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.104721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.119623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.139116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.140587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.143015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:26:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\xa4-*:\x00', 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring)

[  215.297085] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
07:26:23 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
fallocate(r0, 0x0, 0x1, 0x100000000)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000))
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x18, 0x2d, 0x12, 0x16, 0x2, 0x5, 0x2, 0x5a, 0xffffffffffffffff}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$incfs(r5, &(0x7f0000000180)='.log\x00', 0x400000, 0x20)
pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002ec9f00"], 0x24}}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000610693a3d2e88afb4d525081f3657e8ce4c7e49edcd5d1632f7ffb9cec99c04d0a2086e8b3b6290eb38914e2dfa517f2dfc229c89490bcd0431f4fc1f039d34a9688cda36a74be060e620255592b71c0c965ff032811bbe8d8ae4b7f4d84057db3c7bf75ea2086370cf924725556a3d395fc3602b40f67d55d4c8aa6b1f8ffcd6cd198fc1c919adec46e750a88beca999fa1772127c13411e43e0ee447aa2b61cf38f967c1cae41bf4e06f06b4be24f8453c03d77cbf5b8d048f99b80bda9ea6c2649590dd20f0dc1c612f949ed8fe38d78f07c78c5bb03d0976b4d7c3a7fee064bb", @ANYRES16=r4, @ANYBLOB="050000000000000000103100000001012100", @ANYRES32=r6, @ANYBLOB="20005098962069ffffff0802110000010000000000ffffffff00000009000000"], 0x3c}}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0xb, 0x2}, &(0x7f0000000040))

[  215.307338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.308101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.309431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:26:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000002)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))

07:26:23 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x0, {0x0, r2}}, 0x3ff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000240), 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @multicast1}})
signalfd(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x20, 0x4, 0xf6, 0x21, 0x0, 0x1000000000000008, 0xa0, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffeffff, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x0, 0xfffffffffffffffe, 0x40, 0x5, 0x1, 0x6, 0x6, 0x0, 0x7, 0x0, 0x827}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000100)=0x9, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffff8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
recvfrom$inet6(r0, &(0x7f0000000700)=""/4107, 0x100b, 0xcd08, 0x0, 0x0)

07:26:23 executing program 6:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c04008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

07:26:23 executing program 1:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x4040)
perf_event_open(&(0x7f0000001d80)={0x1, 0x72, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbdf, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1)
openat(0xffffffffffffff9c, 0x0, 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
r2 = epoll_create(0x7ffd)
readv(r2, &(0x7f0000000100), 0x1000000000000073)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000001c0)=r3)
lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), &(0x7f00000007c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x143, 0x2)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x4)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040))
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0xc8, 0x6, 0x7, 0xab, 0x0, 0x0, 0x100, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x7}, 0x202, 0x2, 0x9, 0x2, 0x5, 0x20, 0xeca, 0x0, 0x101, 0x0, 0x2e}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  215.550564] SELinux:  Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped).
07:26:36 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff}, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc08c5334, &(0x7f00000003c0))

07:26:36 executing program 6:
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de6", 0x97, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ftruncate(0xffffffffffffffff, 0x8001)
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00')
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000002c0)={0x2, "52ce82295f92360593c9bc014afd9af50f31a08cd4cf4699ee59408610f77382cbeb2a403d0bedbedcd4dd1466b724c15bd14353cbe430f49a45c2a93cb5ed9b"})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
pipe2(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x4)
sendfile(r5, r4, &(0x7f0000000400)=0x80, 0x4000)
ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x39, 0x0, {0x0, 0x2, 0x7f, 0x1, 0x9}, 0x1})
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
kcmp(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0)

07:26:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:26:36 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000005c000000000000030000000000000000000000000000003f002000"/88], 0x58)
close(r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r3, 0x10, 0x0, 0x1000002)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0)
utimensat(r3, 0x0, &(0x7f0000000200), 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x4000, 0x4)

07:26:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/46, 0x2e)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@noextend}, {@nodevmap}], [{@dont_appraise}, {@dont_measure}, {@subj_type}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8c}}, {@uid_eq={'uid', 0x3d, r2}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ppoll(&(0x7f0000000000)=[{r3, 0x108}], 0x1, 0x0, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r3)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x205b, &(0x7f0000000100)={0x0, 0xd3f6, 0x1, 0x0, 0x2cd, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000180))

07:26:36 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))

07:26:36 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
pipe2(&(0x7f00000000c0), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x110, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x80000000, 0x0, 0x7ebc, 0x1}, 0x6)

07:26:36 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x4, 0xfe, 0x8, 0x0, 0x0, 0x8080, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x3, 0x8001}, 0x8500, 0x7, 0xd916, 0x6, 0x100000000, 0x6, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000005a00)={0x0, 0x0, 0x0}, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xf7, 0x7, 0x0, 0x3f, 0x0, 0x433, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x0, 0x2}, 0x200, 0x8, 0xbff, 0x9, 0x0, 0x5, 0x6, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x8)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0xc040, 0x0)
inotify_init1(0x80000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r1, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10062, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  228.455674] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4008 comm=syz-executor.4
[  228.502652] 9pnet: Insufficient options for proto=fd
[  228.537430] process 'syz-executor.7' launched './file1' with NULL argv: empty string added
[  228.637348] ======================================================
[  228.637348] WARNING: the mand mount option is being deprecated and
[  228.637348]          will be removed in v5.15!
[  228.637348] ======================================================
[  228.980033] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz-executor.6: bad orphan inode 301979167
[  228.983682] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  229.187656] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz-executor.6: bad orphan inode 301979167
[  229.188722] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  242.511121] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4057 comm=syz-executor.4
07:26:50 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff}, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc08c5334, &(0x7f00000003c0))

07:26:50 executing program 6:
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaddaf8bebf73208004500007000000000000190780a010102ac1414aa03049078ac1e04014500000000000000000400efab141444ac1414bb442400030000000000000000ac1d000100000000ac1414bb00000000ffffffff00000000071b00e0000001ac1414aa00000000ac1414aaac1e0001000000000071037b2d72759aa0dd619470449619cbcc9d4298786fb6452181d3c445e220c0d259f9d7ba14f12a86a14407e31d2165938dc600f5e1f8b4053f990506dda39c8916c382434e93df0f944463d5935a798e89f81c1dc688ee9cd80fd8229c062ff6"], 0x0)

07:26:50 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
pipe2(&(0x7f00000000c0), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x110, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x80000000, 0x0, 0x7ebc, 0x1}, 0x6)

07:26:50 executing program 7:
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000002)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xd50, 0x7ff, 0x9, 0x1, 0x8, 0xffffffffffffffff})

07:26:50 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/46, 0x2e)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@noextend}, {@nodevmap}], [{@dont_appraise}, {@dont_measure}, {@subj_type}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8c}}, {@uid_eq={'uid', 0x3d, r2}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ppoll(&(0x7f0000000000)=[{r3, 0x108}], 0x1, 0x0, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r3)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x205b, &(0x7f0000000100)={0x0, 0xd3f6, 0x1, 0x0, 0x2cd, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000180))

07:26:50 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))

07:26:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d)

07:26:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  242.525774] 9pnet: Insufficient options for proto=fd
07:26:50 executing program 6:
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000002)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01010400", @ANYRES16=r0, @ANYBLOB="00012cbd7000fedbdf25060000007400038014000600000000000000000000000000000000011400020076657468305f746f5f626f6e6400000006000400fffe000006000400400200001400020076657468315f746f5f626f6e6400000008000500e00000011400060000000000000000000000ffffac1e0001060007004e200000140002800800050005000000080003000200000030000180080008000600000014000300ffffffff0000000000000000000000000800050003000000060002002b0000000800060009000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4008041}, 0x4048000)

07:26:50 executing program 5:
pread64(0xffffffffffffffff, &(0x7f0000003100)=""/4096, 0x1000, 0x1)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
read(0xffffffffffffffff, &(0x7f0000002880)=""/196, 0xc4)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000881)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/234, 0xea, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00')
pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x20000000000000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x401, 0x0, 0x0, 'queue1\x00'})
openat(r1, &(0x7f0000000140)='./file1\x00', 0x80000, 0x127)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0)

07:26:50 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)
ftruncate(r1, 0x10001000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
lseek(r3, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0)

07:26:50 executing program 0:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_emit_ethernet(0x3c, &(0x7f0000000040)={@multicast, @local, @val={@val={0x9100, 0x7, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x3f, 0x0, "66d669bd728f0990af34cd59b01ec8ffee7934c407c86b40533c1a9d301bd5fb9bf40b"}}}}, &(0x7f0000000080)={0x1, 0x1, [0xdb1, 0xac4, 0x81a, 0x923]})
syz_emit_ethernet(0x111e, &(0x7f0000000100)={@link_local, @local, @void, {@mpls_uc={0x8847, {[{0x3}, {0x697}, {0x3ff}, {0x0, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x6}], @ipv4=@tcp={{0x35, 0x4, 0x1, 0x1, 0x10f8, 0x65, 0x0, 0xad, 0x6, 0x0, @loopback, @multicast1, {[@noop, @rr={0x7, 0x1f, 0x28, [@loopback, @rand_addr=0x64010102, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x12, 0x3, [{0x0, 0xa, "d8d67736540b852d"}, {0x6, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0x0, 0x3, 0x3, [{@empty, 0x10001}, {@broadcast, 0x20}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@broadcast, 0x79}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x94}, {@loopback, 0x7}, {@remote, 0x7a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0x5a, 0x3, 0x6, [{@broadcast, 0x81}, {@loopback, 0x4}, {@private=0xa010100, 0x401}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@broadcast}, {@multicast2, 0x3}]}, @end, @ra={0x94, 0x4, 0x1}]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x86, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x200}, @exp_smc={0xfe, 0x6}]}}, {"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"}}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x188, 0xad7, 0xfd7, 0x78d]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
syz_emit_ethernet(0x1072, &(0x7f0000002280)={@empty, @empty, @val={@val={0x9100, 0x1, 0x0, 0x2}, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x3f, 0x105c, 0x65, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, {[@rr={0x7, 0x1f, 0xd, [@broadcast, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1]}, @end, @timestamp_addr={0x44, 0x1c, 0xca, 0x1, 0x9, [{@remote, 0x1000}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd096}]}, @noop, @noop, @noop, @noop]}}, {0x13, 0x1, 0x0, @remote, "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"}}}}}, &(0x7f0000003300)={0x0, 0x4, [0xcad, 0x628, 0x950, 0xa1]})
sendfile(r0, r1, 0x0, 0x100000001)
write$tun(r0, &(0x7f0000001240)={@void, @val={0x3, 0x0, 0x2, 0x8, 0x3, 0x3}, @mpls={[{0x1}, {0x3}, {0xd0f, 0x0, 0x1}, {0x7}, {0x8000, 0x0, 0x1}, {0x3}, {0x3ff}, {0x5}], @generic="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"}}, 0x102a)

07:26:50 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))

07:26:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:26:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))

07:26:51 executing program 2:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f0000000000000001000000010000000f4000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
openat(r0, &(0x7f0000000080)='./file0\x00', 0x20e080, 0xb14c5a2fa254e187)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
fcntl$setflags(r1, 0x2, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x100000001)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000180))
getresuid(&(0x7f00000002c0), &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340))
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000003c0))
mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x3}, 0x2c, {[{@debug={'debug', 0x3d, 0x7fffffff}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_lt={'fowner<', r6}}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_appraise}, {@euid_gt={'euid>', 0xee00}}, {@fowner_lt}, {@dont_hash}, {@fsname={'fsname', 0x3d, '\xc0'}}]}})
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder-control\x00', 0x800, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0)

07:26:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0)

[  242.909806] Zero length message leads to an empty skb
[  242.967015] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4091 comm=syz-executor.4
07:26:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)

07:26:51 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']})
r2 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000240)=0x40, 0x80)
dup2(0xffffffffffffffff, r0)
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="1bd0aa1d710e657a1d271b78926191b9655c6ef367fbf53b116894f95b57eaf2f95b66a6c40393bf5dafcf8d9b1e200ca074e85bf29d82e61947769f6494d5df4dc10c77470b890f21f51052", 0x4c}, {&(0x7f0000000240), 0x0, 0x80000000}, {&(0x7f0000000340), 0x0, 0x7f}], 0x1000101, &(0x7f0000000740)=ANY=[@ANYBLOB="2d29422c7b2c002c6d616373656330002c002c99597882f542707d622c002c6d616373656330002c2c21242c736d61636b6673666c6f6f723d275e2c657569643e", @ANYRESDEC=0xee01, @ANYBLOB=',fowner<', @ANYRESDEC=0xee00, @ANYRES16, @ANYRESDEC=r4, @ANYBLOB="2c61707072616973695f747970653d696d617369672c686173682c7375626a5f757365723d5bf52640212d2b2c6f626a5f747970653d2c646f6e745f686173682c00"])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="3c00a1d0344c253c057e72c0de9c6604000122000002240000010001291100e5ff06d73762ba6a6e7d774d2580610d8a92b0001000000000809ea62c87040a1c6cefa23ec49982007eb05705b6b085775edeeed7861b2126b8dc46272780aaf2443535bce0f0c544e82c40e31026d67d7cd74b2b02bb25396f0fa596865e102dffb921f3f5d414ff4bd1513351bca1f4a0ecf077b26ddccd63dc8b8e3fe5dfdd567341ce089261072b3168e299cc22b74250cfc1b56352c93bd9a35fc1c16749fae436bdd6267296456fdf8ac8393af1"]})
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x3}, {0x2, 0x1, r4}, {0x2, 0x1, r4}, {}, {0x2, 0x7, r4}, {0x2, 0x0, r4}], {0x4, 0x6}, [{0x8, 0x2, r5}, {0x8, 0x2}, {0x8, 0x1, r5}, {0x8, 0x2}, {0x8, 0x0, r5}, {}, {0x8, 0x3, r5}, {0x8, 0x5, r7}], {0x10, 0x4}, {0x20, 0x7}}, 0x94, 0x1)
unshare(0x48020200)

[  243.051990] EXT4-fs (loop2): #blocks per group too big: 16399
[  243.095867] EXT4-fs (loop2): #blocks per group too big: 16399
[  243.121947] nfs: Unknown parameter '-)B'
[  243.210736] nfs: Unknown parameter '-)B'
07:27:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0}, './cgroup.net/cgroup.procs\x00'})
r2 = signalfd(r1, &(0x7f0000003080)={[0x7]}, 0x8)
perf_event_open(&(0x7f0000003000)={0x4, 0x80, 0x0, 0x9, 0x6, 0x7f, 0x0, 0x9a62, 0x88000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x7, @perf_bp={&(0x7f0000002fc0)}, 0x120, 0xff, 0x40, 0x2, 0x4, 0x7ff, 0xa9, 0x0, 0x61, 0x0, 0x5}, 0x0, 0x6, r2, 0x1)
flistxattr(r1, &(0x7f0000000280)=""/4096, 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r5, 0x0, 0x0, 0x1000002)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r5, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000030c0), 0x10000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r7, 0x0, 0x0, 0x1000002)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r7, 0x0)
poll(&(0x7f0000003100)=[{r6, 0x8108}, {r7, 0x2000}, {r5, 0xc80}, {r2, 0x400}, {r3}], 0x5, 0x9)
recvmmsg$unix(r5, &(0x7f0000002e80)=[{{&(0x7f0000001280), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001300)=""/8, 0x8}, {&(0x7f0000001340)=""/129, 0x81}, {0xfffffffffffffffc}, {&(0x7f0000001400)=""/65, 0x41}], 0x4, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001800)=[{&(0x7f00000015c0)=""/130, 0x82}, {&(0x7f0000001680)=""/127, 0x7f}, {&(0x7f0000001700)=""/222, 0xde}], 0x3, &(0x7f0000001840)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000100023f0200000096337ce7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xb8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001900)=""/1, 0x1}], 0x1, &(0x7f0000001980)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000006000000000000000100000001000009", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001a80)=""/37, 0x25}, {&(0x7f0000001ac0)=""/3, 0x3}, {&(0x7f0000001b00)=""/81, 0x51}, {&(0x7f0000001b80)=""/98, 0x62}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/164, 0xa4}, {&(0x7f0000002cc0)=""/212, 0xd4}], 0x7, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x101, &(0x7f0000002f80))
sendfile(r4, r3, &(0x7f0000000000)=0x80, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x110, 0x70bd2c, 0x25dfdbff, 0x6, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xa041)

07:27:05 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']})
r2 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000240)=0x40, 0x80)
dup2(0xffffffffffffffff, r0)
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="1bd0aa1d710e657a1d271b78926191b9655c6ef367fbf53b116894f95b57eaf2f95b66a6c40393bf5dafcf8d9b1e200ca074e85bf29d82e61947769f6494d5df4dc10c77470b890f21f51052", 0x4c}, {&(0x7f0000000240), 0x0, 0x80000000}, {&(0x7f0000000340), 0x0, 0x7f}], 0x1000101, &(0x7f0000000740)=ANY=[@ANYBLOB="2d29422c7b2c002c6d616373656330002c002c99597882f542707d622c002c6d616373656330002c2c21242c736d61636b6673666c6f6f723d275e2c657569643e", @ANYRESDEC=0xee01, @ANYBLOB=',fowner<', @ANYRESDEC=0xee00, @ANYRES16, @ANYRESDEC=r4, @ANYBLOB="2c61707072616973695f747970653d696d617369672c686173682c7375626a5f757365723d5bf52640212d2b2c6f626a5f747970653d2c646f6e745f686173682c00"])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="3c00a1d0344c253c057e72c0de9c6604000122000002240000010001291100e5ff06d73762ba6a6e7d774d2580610d8a92b0001000000000809ea62c87040a1c6cefa23ec49982007eb05705b6b085775edeeed7861b2126b8dc46272780aaf2443535bce0f0c544e82c40e31026d67d7cd74b2b02bb25396f0fa596865e102dffb921f3f5d414ff4bd1513351bca1f4a0ecf077b26ddccd63dc8b8e3fe5dfdd567341ce089261072b3168e299cc22b74250cfc1b56352c93bd9a35fc1c16749fae436bdd6267296456fdf8ac8393af1"]})
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x3}, {0x2, 0x1, r4}, {0x2, 0x1, r4}, {}, {0x2, 0x7, r4}, {0x2, 0x0, r4}], {0x4, 0x6}, [{0x8, 0x2, r5}, {0x8, 0x2}, {0x8, 0x1, r5}, {0x8, 0x2}, {0x8, 0x0, r5}, {}, {0x8, 0x3, r5}, {0x8, 0x5, r7}], {0x10, 0x4}, {0x20, 0x7}}, 0x94, 0x1)
unshare(0x48020200)

07:27:05 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
timer_delete(0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
syz_open_procfs(0x0, 0x0)
timer_create(0x5, &(0x7f0000000340)={0x0, 0x28, 0x3}, &(0x7f0000000380))
timer_create(0x2, &(0x7f0000000440)={0x0, 0x16}, &(0x7f0000001540))
timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000300))
timer_create(0x4, &(0x7f00000003c0)={0x0, 0xf, 0x1}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000240))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, 0xffffffffffffffff, 0x2)
read(r1, &(0x7f0000000080)=""/65, 0x41)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0200002e2f66696c65300040"])
clone3(&(0x7f00000014c0)={0x40182300, 0x0, 0x0, 0x0, {0x40000034}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_open(0x0, 0x0)

07:27:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)

07:27:05 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0)
close_range(r1, r0, 0x0)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="43f4000ed6da6a9f2995862ba8da85645ab73389e55505c8411adda2ea623176fea453ad7e0ab9f01c76bc3ca89d07a54c704f3c13535385f6cad82be671aac30a438f13831ce82fae2eb9f7", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf25310000000c009900ffff00004f0000000c009900030000005800000008005200", @ANYRES32=0x0, @ANYBLOB="080001002900000008005200", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xadfce7a21332102c}, 0x4000000)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010)
keyctl$revoke(0x3, 0x0)
unshare(0x48020200)

[  257.700139] audit: type=1400 audit(1727076425.974:10): avc:  denied  { watch_reads } for  pid=4128 comm="syz-executor.2" path="/syzkaller-testdir427944261/syzkaller.O01fu6/5" dev="sda" ino=15981 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
07:27:05 executing program 2:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
creat(&(0x7f0000000000)='./file0/../file0\x00', 0x192)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
ftruncate(r1, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/32, 0x20}, {0x0, 0x26}], 0x2)

07:27:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:27:05 executing program 5:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000fd5834a34da6a7f4fca9701359d0e981ead1bb03e767cec802f88e538c11579d9c45e888a06af98286a33362c3074a4a6e757c6de6a484812d135a98025a4e38a4f31f9e1e7e2ee9eb91b12ec079e4e8658f1bccc72c9c9724e0f1437e20b595239f1d7393e7ef02426e8e805ee2e18788ccabc0830b712547c9b138583567aaf843fb9972371f7dc51b627930be3d0891ddca2acbd0beff26cb9cadda02b997d1976cb024c7773354", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00')
pread64(r0, &(0x7f0000000340)=""/72, 0x48, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="c73448c87e1180e7ed3d112db7215d34017e1d57f5d4df66248e57778e86650b321fc98dbe3f8fdb52cda387494c07788442b893", @ANYRES16, @ANYBLOB="280427bd7000fcdbdf2501000000000000000941000000140018000000096574683a67656e6576653100"], 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x94)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82004040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc804}, 0x800)
lseek(r1, 0x800, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580))
fstat(r1, &(0x7f0000000600))
sendfile(r1, r2, 0x0, 0x100000001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x408080, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100a200}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0x100, 0x0, 0xc00, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}, {0x8, 0xb, 0xffffffc0}, {0x6, 0x16, 0x1000}, {0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x8c18}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x1f}, {0x8, 0xb, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x6}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10000000}, 0xb0)

[  257.722274] audit: type=1400 audit(1727076425.996:11): avc:  denied  { watch_reads } for  pid=4128 comm="syz-executor.2" path="/syzkaller-testdir427944261/syzkaller.O01fu6/5/file0" dev="sda" ino=16016 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
[  257.729455] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4134 comm=syz-executor.4
07:27:06 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  257.858679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4135 comm=syz-executor.6
[  257.968874] nfs: Unknown parameter '-)B'
[  271.846678] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4153 comm=syz-executor.4
07:27:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
kcmp(r8, 0x0, 0x0, r6, r7)

07:27:20 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0)
close_range(r1, r0, 0x0)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="43f4000ed6da6a9f2995862ba8da85645ab73389e55505c8411adda2ea623176fea453ad7e0ab9f01c76bc3ca89d07a54c704f3c13535385f6cad82be671aac30a438f13831ce82fae2eb9f7", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf25310000000c009900ffff00004f0000000c009900030000005800000008005200", @ANYRES32=0x0, @ANYBLOB="080001002900000008005200", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xadfce7a21332102c}, 0x4000000)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010)
keyctl$revoke(0x3, 0x0)
unshare(0x48020200)

07:27:20 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
timer_delete(0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
syz_open_procfs(0x0, 0x0)
timer_create(0x5, &(0x7f0000000340)={0x0, 0x28, 0x3}, &(0x7f0000000380))
timer_create(0x2, &(0x7f0000000440)={0x0, 0x16}, &(0x7f0000001540))
timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000300))
timer_create(0x4, &(0x7f00000003c0)={0x0, 0xf, 0x1}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000240))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, 0xffffffffffffffff, 0x2)
read(r1, &(0x7f0000000080)=""/65, 0x41)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0200002e2f66696c65300040"])
clone3(&(0x7f00000014c0)={0x40182300, 0x0, 0x0, 0x0, {0x40000034}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_open(0x0, 0x0)

07:27:20 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x185142, 0x0)
syz_io_uring_setup(0x2546, &(0x7f0000000040)={0x0, 0xdcc, 0x4, 0x2, 0x3be, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x100000001)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r4, 0x0, &(0x7f0000000500)="d635ccefe7577297622f5d513fe57d1fe4110b6ec12a1c32d4f49bae52b2aae2164da9c66ac8c2bec740d81fd449c19efff994b20998c5bc238007a2dccd2f0473ed1c2b8ef9ce1de70eab18e1025bff943dc26b943a0985c007dbded55c1ce2042e76808551df4283057b022547a1f093de8ed9ef7037a065e5f914aa0fb712b44fa09f5e3ba457104fbb502bd8d4afd72e6db2d9d4b0609c5fdf9e5599ac9d89904f9e2d343f5810d785ef12b5b73c4b0fbbfdc38e39ad12016af33267ccbaa3faa957a7ddae97f174332772c73911a24ce61990a1bd72e763d54b99db6cdf88bdcf4f88de98fb6163f1746305139bf065cda480c51c94d628cc90b5f0e3cbc84e1c8bb7dc8003a70ecf2ff4b78aed3c994cfb7d82714ceb108ef0c3cab71d05619ca977526df539d90501fd530ed9491cb48bdb83d663452eca523325308b60aa14e16ff54950f5f85d6e8efb592dd95483985d96498c07a0aa1151f444d941d70582b451413fda6b87bbd32d07f6f40c190144dbcf83d924ca3144a802b60292b71485bb9e241741f9f15d74b95f9c5a020a70c35b792997ce91c9500dc249b51f1b854de1749b0700ca7c64a3278930e5349acb38245f3042f1f2c3b12b85680bd2493b97a8643e00bc275806d84ff05aef5795f5e8b5f7ceb819c1222367de39478a4f7ee9d85025b53b93d245c3b19b60ad591058f2bbf19e3d20d4461a3f6cce67ebb076cbc93927536e2f9b5bd28e329014dab0711c755b690c6e09fee77c272bd89dd82185c45c7bba4b5204951e25043bc9ed67ec3bbdceb979067064a2f84c58e398bcbcaf757f40fa717b631c7c1883750f836638c436b2ef2f62a6436af0d02dacbb65f1eaf7ce1329eb4c46c6acd1831633761ada6d7e0f1d449dd283c9079996c3b2449f7a064702b09645c1ad4a77c2a41fe3d6bf8d792d4cb98690043fe14288d4afb0932550a1000b20b3558fd2a27b76e5d6279946a75600b16b85790dbb2ada32673993b3440a1342fb4281dcfd8d5d53aacbde6bbb28ef8fb82afbec05377148f991ee71fa52d590131b3ab01a49b7ee7a4ee7315bd61250c895edb2202f78ab0453f45d2055d53c305ca198c27835bc6c8e1f28d396052a36103eaccc24a543e822a31e1155e4000dc9e84a843cf6d05e37e799d40fd3e4a6039d372a5058609ec2e154696b3d0923bd69edb9c0884c6466620bc2bf97eed35998861d1d53952c7bc1a02cc9afa1c1ed611c18bc4a55b5b5aeec198a87f6bd1919c6bdf03877172d7c58583af829ad07a06adfc48e0578c5ab91a8acc478b4b7f79b6cba028d72d118ba5281d052e3264dcbe8e332e600a5d8fe9179068dd50597cead0e0331b9032e903bb36f01f54655fce7e0f40b76103c4ab5d6c228c7b6e1a5f33f874fb01f853d07152afa007b8675159d0602114a9fb1baaf72f01661fdae4b2249826bdef10fbb8cbb47ea94cd12115071699dc80520e28861a8866bf449fc0178f1e4c494f777c3f0f481cb062761c4f25d5da945c785ef8f2b8b5d47d222d561ac0bf10a2c5c86aa3492ff13f52ae642f69ebf97276fa8d80b700e6de0b883fab09fd295fe67954eca7fe83448f83993afff39eaca9e1446d7cd998a3a3d9e81a7d06f0001f1aea8adfaf9e2072eaa2bf646d1a682c8bcddf07606ea38279b740384b9bf1c0d0cc84190372c061ed3f3c6c424c1481df8c53b42b354f9874dd51dddcfb901eaddc0cd39a689ae012328dd9f38124bd4d986f3cbfce0ebc09a2494857c583efb4c1b83d5112da34a13225d0f3d98b38ac09bbafe405dc9fdea4cb796369a41b1c6cf2545a5349f2ac20820a905259965bb3d26cd63a2893ceb82d9a3317c492af6ca5ceb0748f1d75a5422bdc22f50206753a81f7db80b5ed20cecef4b1b3f195a7fa247c50d621bdac4dbfaf32266026fd673c980b13425a292474a931cb77d44e5086812a73058ed40663ebffb68946cbf84dabd94006d9d7c7bd1a257fb1f831454a0b5e40e76346edfdeb709d510c5934eb097310d58870acab9282510ee05c501aee0f3a4f9b0e8d96ae6c582dca5fa9c9b28be49237169204285c5ed12cc9a8628a4cf6cb5d2a28ad28cbcd28b72d47ee6536d469e3a9b400a1b906b86cd0234fb6c67bfb04e9f9d59310e00ebbfc4d03accac9a5d4ca0942e27f8eb345b127fe14b0c45ac2fd04d5c6e352cbbb853a52bdd73e1ae2df4c123d795604dd5bd326c225f896931f6f9eadf7c3220ec1e9112ccad3c305eaa0541430037654a615424a5f2cea865d51d378efcd6ee8b4b960444745984655d2fb9ec03def3bdb6c0089692c384970c2f0f4fb3ff40deec6b745d5ba332d0df242ad2b7722b84614050e0e4f6c460fbd9251769ddebaeaf9fb1e88807e4d7e07ad1e9e4665bbbf9264ec48d5bf49a7da98a504f95b9c71036101cc0ab28f36088acffe52c172a6f7984d071b682b72068592c4f630159a36720b3df0d0a377973fad38dad81341fcf78c95a9cf0ca30e211b19e582864be793be5a48e5b25522356184d1b0cb401540867d2cb6d501264b9f07015e4fa96553335449393814dad1d16701f0a7b858d4cb48b7505d60a93f936236a39d4c8892f4d0e1f238ec57c75421e777e3b70f4a3406ff74f53bbb942d9f68af701045f94816eefb8f51d6b53d1d0ae9cbeb1903b38e49e1b8c850634df86689930e38323aa20cfae0770af618b98def50a3ad773bc4e33fe86f39de75a23d7d97f2d80bd08ec43c9d04cea24405783386b51f665bf4aa4e1a8b3db6ef44fe6d6312fc2a600f9b2fe86e2c83ca707ccd99ecf7948b74d199968599e48a7687999d6ae4a3719d1de53fe32f20bb1276fe616ad441d05c255427916582b03a89e721583d067a9d6b223fb95e90a37c18d5ded656c592e8a9e3e43febc0a1b9b29c107509d7dc6b0f63dd77054ea7ede83e27e81bffa03a1fa66360b1f3ad9e9fc91def96be0bafb2aafa11715af8aa1aa373c08c3f5960cbe6ec22c1fad84430a37420cabc050dacd43efe8eae13bc42be60a80e6aba0c61a1f89437ad988fe8b66ef64dd6daf1993cc0f4ea9deca3fd33e576350a683338901a4005b8fdebdb9cb149c4da420f87f92a88b35e0e79188223bd35126b0d795a99eee83792116460f8301553bd918ce093fd76dc871d242a48df1375939c37d490ab6f117f0a647abc60a44d6a45b7fea788c8471ff1993fefa17ff2b1c10953f4fd7570a758f131d95b65e2ca50ca62d22f3e7410f6a035a6b3bd195f405cb4da1a4203959cc7a546e2475891adab2919fccaabbf048b2543181d56dee7d32ad5e40ca8139e2dfdc85e6a272d910ac31dfa905f3c8876a30b0ad71353b56ecf5e08328c64de2c90ef6b543a99a2568e3c0e68237fba04fbe38971512931b481e5654a2da5250a9257c60b31bef345a9c6d3760904aa70807ec7cb091f9241f6ad7a247df023479a706e1939db4a35718c621769ead553cf53b08408d141748d34e62ce0fd772898a269b67d395a0908bc60941554acfb305c1143c8d2078335a8f460c4c4eda6c73881015e179097285baba187db0ce9b52e59e7e0025d85905dd1574de94d7f3132b7bd5081760d9668c39fc9861f8c87e6f8c1b1d7649ee4ee0fe62dc90f640358a2ee1d28ea703512f69e1c74126a61924e86d2dd633741bea3d14512369e188037bb9ef3ecdd131e0514c7ca9a8c8f689ca03a7342f52264837d4099b67f97fb381141b0bed79e78aca8d5f87da40b773620e72343864ace27cf19ed22461570fd514dcc28a591f8fab3e20b8d53227a73b5ab6bdea9a90a88c713a794639e601585d6b8c23d4c081ec52d281ac6cb5b0cad72aaa72111a44e5cefbe1b88d7e01e6c99067e15b37bb384309d40358940a0d46089ab0bf19ce40e3ca53d636a2699e82eca7b34543a93824d78b2218c3d7d9b79815030a17861549f63b699aafef32429ef9a56a029113f65b701df92fe67da285dfad0a78550fb31daea7084c7fc5c7f53645532d264dc6d3aed39bcd27c1871b960cf10d082181d16d89d16c2468bf1288551deda86eaf136bb767dca002a6d6ffd40c2009375bc10cbcc65eace8f7a9b3db5c751a3078e4739fc165ba85160920d73b1a8caa04e72c022fafdce9eb284de7ca03788c38e1e6857992d8e4430259f537b7605a2c780398b1b80d49ae34c7691c7939ae803ac1e476ea94738d98c17918b543a9b29fb44aba626af474724f1256d201c71dc99b3176c61517f85dacaf00b28c5e13955a7d29d5f4be28363cf44c2c502fd12d725cdd221f1a307c10c61d1ce6f118270c04c91fa56a766b3c6d1bd138fdb4f74c775ed5b82fc056b64178b9656022cecdfaa720ca4e5037257038d0829765feed61adc960bc52e86e69a0e374339915ae1a4623de3ca301240892abc8209f31a008dbb70aa269e4eae25bfb031c4d43eb5fca9357750abe36d93b985a05cfbdbad43a35eac8066ef2a2293d737c0c09dbb4d44b949c57a5b024286a836e71450ed21c53974917c25cc102b4408cde5b4bc80e7c0e92d481d02a261808acd7d521cb8f3a8210f0e363199064b10eb71ba1bb64296ba98e99853b60a37fd1093a7af5022ec57966a9abb3be384ef265f0eefd88869c2af3bbe705cf905dcb7ecc6a8ca4d0114f74e520d784f4b9c2694a73ac42de7a7c85bd9fe5869e0938c399d378ba7aea7c9421de4d875fb607f895afdaf660bc81c02738117934f1a869f6d1268eb12d1057eae7e58907116661b9d423041667e3a8fa9bb4ad491b980a2537c7de1efd95d5b9042e1f18c11117db9b3ab8cbea4d41638a55e5ec0ef977be60e48eb110f9fbe96b405190a80d237e65c220bafab2be3cb346d04f8a3a50badc7681fc0d1cb7edb1a232318c043fdecee03e41bb575c9f1779aeaa23efa04a13b3a4ae7eb568d355dd4a2f4f646de392e72a3c2379baa4bebf8faa952af22bba63211fae82b3af70c155ed4e83b8363da9a4de18b1a2b49075b636c586d44c756790616adf2c4db01fbd2fea8a4482651c45b219bf833c4f3c51bda239fc2b2ee996d75107144736b89aca48bcd777e48edb246e5feee433351f8826d4d194c726a00c77b5de6dd638c30692053ec473fafb8370554694de3312da36e293d415b1452431975fb9c0b9d0933a33c0162901e68389730111261fff581575096352fa1070faaaa3f7a4030e4a4c31c745b8080558006130215aa311d4270e0b10e0128b81774d9a2da654294482244ffed4239a5f39b11ddcf6434dfa512c36e0e7aa9849e4253b46827375b2c771338ba9de46fc2488739eac9075a4351f2127b7cc1d140429e7ac47e7fd0226a133cddf8fafb5bb052764d3992cd95bbfc9c7085afc3c282f73fe75922af7c3a4e21f1584e39ff43f61fd77d737c5dbc160654df457c8c30aa2e756dfa102cb5a559ee792130181e0a09a82975c1a9b52f7526de6bda09ed5089997f26e6e7b8cc5bf924fac3c366b70c573a5c821d211d2a95018ca0dd2e53a676b6228cc9da02d07805890bfa0b755ff9f4757dacbfdcd938fe47bd1001d95df5fad7fb65f0e0bb93d495acdf2bbd2db091e3700f3b627996c47ba3268584b1806e4aa233a89c7df33e529f3651f4835e1539d45dd8d4987c5b34297f50e6a220a155c0f0c6807d21aa07582962588c69c675f84ac3e2f9470389057f51f72dedffe211eb2589e86e9d88718c6c3669bf31737873d775c1043608bbdd173f3d80605cab8de9b9e98a7479bb8", 0x1000, 0x40, 0x0, {0x0, r5}}, 0xfffffff9)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0))
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r0, {0x1}}, './file1\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x3, 0x881ea62178d1f5a3, 0x2, 0x0, 0x10cc, 0x80}, 0x20)

07:27:20 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']})
r2 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000240)=0x40, 0x80)
dup2(0xffffffffffffffff, r0)
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="1bd0aa1d710e657a1d271b78926191b9655c6ef367fbf53b116894f95b57eaf2f95b66a6c40393bf5dafcf8d9b1e200ca074e85bf29d82e61947769f6494d5df4dc10c77470b890f21f51052", 0x4c}, {&(0x7f0000000240), 0x0, 0x80000000}, {&(0x7f0000000340), 0x0, 0x7f}], 0x1000101, &(0x7f0000000740)=ANY=[@ANYBLOB="2d29422c7b2c002c6d616373656330002c002c99597882f542707d622c002c6d616373656330002c2c21242c736d61636b6673666c6f6f723d275e2c657569643e", @ANYRESDEC=0xee01, @ANYBLOB=',fowner<', @ANYRESDEC=0xee00, @ANYRES16, @ANYRESDEC=r4, @ANYBLOB="2c61707072616973695f747970653d696d617369672c686173682c7375626a5f757365723d5bf52640212d2b2c6f626a5f747970653d2c646f6e745f686173682c00"])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="3c00a1d0344c253c057e72c0de9c6604000122000002240000010001291100e5ff06d73762ba6a6e7d774d2580610d8a92b0001000000000809ea62c87040a1c6cefa23ec49982007eb05705b6b085775edeeed7861b2126b8dc46272780aaf2443535bce0f0c544e82c40e31026d67d7cd74b2b02bb25396f0fa596865e102dffb921f3f5d414ff4bd1513351bca1f4a0ecf077b26ddccd63dc8b8e3fe5dfdd567341ce089261072b3168e299cc22b74250cfc1b56352c93bd9a35fc1c16749fae436bdd6267296456fdf8ac8393af1"]})
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x3}, {0x2, 0x1, r4}, {0x2, 0x1, r4}, {}, {0x2, 0x7, r4}, {0x2, 0x0, r4}], {0x4, 0x6}, [{0x8, 0x2, r5}, {0x8, 0x2}, {0x8, 0x1, r5}, {0x8, 0x2}, {0x8, 0x0, r5}, {}, {0x8, 0x3, r5}, {0x8, 0x5, r7}], {0x10, 0x4}, {0x20, 0x7}}, 0x94, 0x1)
unshare(0x48020200)

07:27:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x9, 0x0, 0x2, 0xa5102, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x85db, 0x4, @perf_config_ext={0x0, 0x401}, 0x10, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a00)={'sit0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1])
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000002c0))
r2 = syz_io_uring_setup(0x3a77, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

07:27:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:20 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
timer_delete(0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
syz_open_procfs(0x0, 0x0)
timer_create(0x5, &(0x7f0000000340)={0x0, 0x28, 0x3}, &(0x7f0000000380))
timer_create(0x2, &(0x7f0000000440)={0x0, 0x16}, &(0x7f0000001540))
timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000300))
timer_create(0x4, &(0x7f00000003c0)={0x0, 0xf, 0x1}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000240))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, 0xffffffffffffffff, 0x2)
read(r1, &(0x7f0000000080)=""/65, 0x41)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0200002e2f66696c65300040"])
clone3(&(0x7f00000014c0)={0x40182300, 0x0, 0x0, 0x0, {0x40000034}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_open(0x0, 0x0)

[  271.914084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4169 comm=syz-executor.6
07:27:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
mq_timedsend(0xffffffffffffffff, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
kcmp(r8, 0x0, 0x0, r6, r7)

[  271.967313] Restarting kernel threads ... done.
[  271.988652] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4176 comm=syz-executor.4
[  272.006846] nfs: Unknown parameter '-)B'
07:27:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
mq_timedsend(0xffffffffffffffff, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
kcmp(r8, 0x0, 0x0, r6, r7)

[  272.096420] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4183 comm=syz-executor.4
07:27:20 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0)
close_range(r1, r0, 0x0)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="43f4000ed6da6a9f2995862ba8da85645ab73389e55505c8411adda2ea623176fea453ad7e0ab9f01c76bc3ca89d07a54c704f3c13535385f6cad82be671aac30a438f13831ce82fae2eb9f7", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf25310000000c009900ffff00004f0000000c009900030000005800000008005200", @ANYRES32=0x0, @ANYBLOB="080001002900000008005200", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xadfce7a21332102c}, 0x4000000)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010)
keyctl$revoke(0x3, 0x0)
unshare(0x48020200)

07:27:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
mq_timedsend(0xffffffffffffffff, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
kcmp(0x0, r8, 0x0, r6, r7)

[  272.395217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4189 comm=syz-executor.6
[  272.397724] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4196 comm=syz-executor.4
07:27:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x9, 0x0, 0x2, 0xa5102, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x85db, 0x4, @perf_config_ext={0x0, 0x401}, 0x10, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a00)={'sit0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1])
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000002c0))
r2 = syz_io_uring_setup(0x3a77, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

[  272.517659] Restarting kernel threads ... done.
07:27:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:20 executing program 7:
setns(0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000f30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000130a01020000000000000000020000040900010073797a31000000000900020073797a3200841d008700064000000000000000030900020073797a32000000000900010073797a30000000000900010073797a3000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x7, 0x0, 0x0, 0x0, @str='!-\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="bb"}]}]}, 0x28}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x1b, 0x1, 0x70bd27, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x66}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x12}]}]}, 0xfffffffffffffe5e}, 0x1, 0x0, 0x0, 0x80}, 0x4814)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0x10000000)
signalfd(r1, &(0x7f0000000280)={[0x3ff]}, 0x8)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)

[  272.568911] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
07:27:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
kcmp(0x0, r8, 0x0, r6, r7)

[  286.827260] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4215 comm=syz-executor.4
07:27:35 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r2 = getpgrp(0x0)
r3 = pidfd_open(r2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0)
r4 = dup(r3)
setns(r4, 0x2020000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00ffffffffffff2f662e6c000000"])
sendfile(r5, r6, 0x0, 0x100000001)
ioctl$KDADDIO(r6, 0x4b34, 0x658)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DVD_READ_STRUCT(r7, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4a1c, 0x8, @remote, 0x3}, 0x1c)

07:27:35 executing program 2:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={<r1=>0xffffffffffffffff, 0x3, 0xfffffffffffffffa, 0x2})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = creat(&(0x7f0000000000)='./file2\x00', 0x1)
preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/35, 0x23}], 0x4, 0x5, 0x0, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x131001, 0x0)
bind(r5, &(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xb41e, @local, 0x4}}, 0x80)
lremovexattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73656375f6d5726974792e00"])
r6 = socket$inet(0x2, 0xa, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000280))
dup3(r6, r4, 0x0)
r7 = fork()
ptrace(0x10, r7)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace$peeksig(0x4209, r7, &(0x7f0000000040), &(0x7f0000000180))

07:27:35 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:27:35 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x8001}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0128a8fd13e14036e3f845c2f80a4de7ba91f92b8380847ad91df481dc140000000002000048000000feffffff07000061fdb7be1b305ab49144490b000000000000a730a0291bd171524e2dc84323488de32bc5dd70fdf74f252d4fa637bdfd53ce8f2c3cd1b303d2a089339c8035814b87c2d6e789fcf00b1cb75a8e4d928fb4da89b9e52d5cba1e5b1489a52391fc045ecb57a3f4ffd92489f8"], 0x8e880)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'vlan0\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8001, 0x6e0e, 0x76ba, 0x200, 0x1, 0x1e43]}, &(0x7f0000000180)=0x78)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

07:27:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x20)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x142)
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./file2\x00', 0x20)
fcntl$setlease(r2, 0x400, 0x1)
r3 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"0d26e3e41243707dab4734a4c2d82126", <r4=>0x0, 0x0, {0x7, 0x6}, {0xffffffffffff7fff, 0x7}, 0x3, [0x490, 0x3, 0x8, 0x2, 0x1, 0x0, 0xa15, 0xffffffffffffff5b, 0x9, 0x4, 0x7, 0x9, 0x94, 0x6, 0x6, 0x9]})
[  286.841460] audit: type=1400 audit(1727076455.115:12): avc:  denied  { write } for  pid=4212 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  286.841675] syz-executor.6 uses obsolete (PF_INET,SOCK_PACKET)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000300)={{r3}, r4, 0x16, @unused=[0x5a361ff5, 0x9, 0x1, 0x200000000000], @name="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"})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
lseek(r1, 0x0, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0)

07:27:35 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x9, 0x0, 0x2, 0xa5102, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x85db, 0x4, @perf_config_ext={0x0, 0x401}, 0x10, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a00)={'sit0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1])
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000002c0))
r2 = syz_io_uring_setup(0x3a77, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

07:27:35 executing program 7:
setgroups(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000001c0)={0x0, 0x0, 0xd0d})
fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010005000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="f208dea963c034fea07e752715337793984370ddba0dd971e8637cc996352bc0d46d5f6339eca3a610e612c109420ed10ab883abfab7360bab3300"/78, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000400000000002000000000000000"], 0x64, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x1}, {}], {0x10, 0x4}}, 0x5c, 0x0)

07:27:35 executing program 7:
setgroups(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000001c0)={0x0, 0x0, 0xd0d})
fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010005000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="f208dea963c034fea07e752715337793984370ddba0dd971e8637cc996352bc0d46d5f6339eca3a610e612c109420ed10ab883abfab7360bab3300"/78, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000400000000002000000000000000"], 0x64, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x1}, {}], {0x10, 0x4}}, 0x5c, 0x0)

07:27:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
kcmp(0x0, r8, 0x0, r6, r7)

[  286.958309] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4239 comm=syz-executor.4
07:27:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a330012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,nnonumtail=1,shortname=winnt,nnonumtail=1,iocharset=cp932,shortname=win95,nnonumtail=1,shortname=win95,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsXloor=\x00,\x00'])
mknodat$null(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000480), 0xb00440, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000010001,nodevmap,msize=0x000000000000992d,posixacl,loose,loose,access=user,obj_role=vfat\x00,appraise_type=imasig,euid>', @ANYRESDEC=r2, @ANYBLOB="000018e2ad020517c9041f232e34fb827b65e78c2df1b6bc078b4c4d443bebac6d42d85971c707b5c380c3f243a58aeb9f7c4f12dcf1ad1a8baf07af8066011405d4aac6307bb53faa9f09bba5f3deb0e11403c469b0ddf777d0ae51e86992b4c6a9ba188512c310b577612c52603a412d1c6437413a7203a359135d6de924405676cebf552ca79617efc7f52a3ba8d3a3a79bf6d4cc689f3170822dd9de87ef13d7957571df657be480babb964e8f6a5c8d2ec830b8b4c78d070aa5bca859aa082db41cbaad7beefdeb216f36a8b9e4cc"])
syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x84040)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000240)=0x81)

[  287.039753] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
07:27:35 executing program 7:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x2, @unused=[0x81, 0x5, 0xcf, 0x7], @subvolid=0x90a1})
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280))

[  287.094847] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
[  287.302083] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
[  287.589311] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
07:27:49 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r6, 0xffffffffffffffff)

07:27:49 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0010000000000000000000000200000029df8bfd664029436259ac0f410120c9e21a43958d00cbdffeaf68e7ca63dcd3056a837828f17602ddfe050200000730000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000c204000000000710000000000300"/131], 0x88)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syncfs(r3)
r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x100000001)
fcntl$lock(r2, 0x5, &(0x7f00000002c0)={0x2, 0x3, 0x1, 0xd07dd0f})
r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8, 0x10000)
openat(r1, &(0x7f0000000240)='./file1\x00', 0x400000, 0x4)
dup3(r4, r5, 0x80000)
sendfile(r1, r2, 0x0, 0x100000001)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x8e, 0x4)

07:27:49 executing program 7:
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000002)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)
syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp6\x00')
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0)

07:27:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a330012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,nnonumtail=1,shortname=winnt,nnonumtail=1,iocharset=cp932,shortname=win95,nnonumtail=1,shortname=win95,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsXloor=\x00,\x00'])
mknodat$null(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000480), 0xb00440, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000010001,nodevmap,msize=0x000000000000992d,posixacl,loose,loose,access=user,obj_role=vfat\x00,appraise_type=imasig,euid>', @ANYRESDEC=r2, @ANYBLOB="000018e2ad020517c9041f232e34fb827b65e78c2df1b6bc078b4c4d443bebac6d42d85971c707b5c380c3f243a58aeb9f7c4f12dcf1ad1a8baf07af8066011405d4aac6307bb53faa9f09bba5f3deb0e11403c469b0ddf777d0ae51e86992b4c6a9ba188512c310b577612c52603a412d1c6437413a7203a359135d6de924405676cebf552ca79617efc7f52a3ba8d3a3a79bf6d4cc689f3170822dd9de87ef13d7957571df657be480babb964e8f6a5c8d2ec830b8b4c78d070aa5bca859aa082db41cbaad7beefdeb216f36a8b9e4cc"])
syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x84040)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000240)=0x81)

07:27:49 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a330012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,nnonumtail=1,shortname=winnt,nnonumtail=1,iocharset=cp932,shortname=win95,nnonumtail=1,shortname=win95,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsXloor=\x00,\x00'])
mknodat$null(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000480), 0xb00440, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000010001,nodevmap,msize=0x000000000000992d,posixacl,loose,loose,access=user,obj_role=vfat\x00,appraise_type=imasig,euid>', @ANYRESDEC=r2, @ANYBLOB="000018e2ad020517c9041f232e34fb827b65e78c2df1b6bc078b4c4d443bebac6d42d85971c707b5c380c3f243a58aeb9f7c4f12dcf1ad1a8baf07af8066011405d4aac6307bb53faa9f09bba5f3deb0e11403c469b0ddf777d0ae51e86992b4c6a9ba188512c310b577612c52603a412d1c6437413a7203a359135d6de924405676cebf552ca79617efc7f52a3ba8d3a3a79bf6d4cc689f3170822dd9de87ef13d7957571df657be480babb964e8f6a5c8d2ec830b8b4c78d070aa5bca859aa082db41cbaad7beefdeb216f36a8b9e4cc"])
syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x84040)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000240)=0x81)

07:27:49 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x9, 0x0, 0x2, 0xa5102, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x85db, 0x4, @perf_config_ext={0x0, 0x401}, 0x10, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a00)={'sit0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1])
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000002c0))
r2 = syz_io_uring_setup(0x3a77, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

07:27:49 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r2 = getpgrp(0x0)
r3 = pidfd_open(r2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0)
r4 = dup(r3)
setns(r4, 0x2020000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00ffffffffffff2f662e6c000000"])
sendfile(r5, r6, 0x0, 0x100000001)
ioctl$KDADDIO(r6, 0x4b34, 0x658)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DVD_READ_STRUCT(r7, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4a1c, 0x8, @remote, 0x3}, 0x1c)

07:27:49 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  301.367722] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4267 comm=syz-executor.4
[  301.381747] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
[  301.390636] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
[  301.527266] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
07:27:49 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r6, 0xffffffffffffffff)

[  301.682142] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4293 comm=syz-executor.4
07:27:50 executing program 0:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r2 = getpgrp(0x0)
r3 = pidfd_open(r2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0)
r4 = dup(r3)
setns(r4, 0x2020000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00ffffffffffff2f662e6c000000"])
sendfile(r5, r6, 0x0, 0x100000001)
ioctl$KDADDIO(r6, 0x4b34, 0x658)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DVD_READ_STRUCT(r7, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4a1c, 0x8, @remote, 0x3}, 0x1c)

07:27:50 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a330012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,nnonumtail=1,shortname=winnt,nnonumtail=1,iocharset=cp932,shortname=win95,nnonumtail=1,shortname=win95,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsXloor=\x00,\x00'])
mknodat$null(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000480), 0xb00440, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000010001,nodevmap,msize=0x000000000000992d,posixacl,loose,loose,access=user,obj_role=vfat\x00,appraise_type=imasig,euid>', @ANYRESDEC=r2, @ANYBLOB="000018e2ad020517c9041f232e34fb827b65e78c2df1b6bc078b4c4d443bebac6d42d85971c707b5c380c3f243a58aeb9f7c4f12dcf1ad1a8baf07af8066011405d4aac6307bb53faa9f09bba5f3deb0e11403c469b0ddf777d0ae51e86992b4c6a9ba188512c310b577612c52603a412d1c6437413a7203a359135d6de924405676cebf552ca79617efc7f52a3ba8d3a3a79bf6d4cc689f3170822dd9de87ef13d7957571df657be480babb964e8f6a5c8d2ec830b8b4c78d070aa5bca859aa082db41cbaad7beefdeb216f36a8b9e4cc"])
syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x84040)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000240)=0x81)

07:27:50 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a330012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,nnonumtail=1,shortname=winnt,nnonumtail=1,iocharset=cp932,shortname=win95,nnonumtail=1,shortname=win95,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsXloor=\x00,\x00'])
mknodat$null(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000480), 0xb00440, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000010001,nodevmap,msize=0x000000000000992d,posixacl,loose,loose,access=user,obj_role=vfat\x00,appraise_type=imasig,euid>', @ANYRESDEC=r2, @ANYBLOB="000018e2ad020517c9041f232e34fb827b65e78c2df1b6bc078b4c4d443bebac6d42d85971c707b5c380c3f243a58aeb9f7c4f12dcf1ad1a8baf07af8066011405d4aac6307bb53faa9f09bba5f3deb0e11403c469b0ddf777d0ae51e86992b4c6a9ba188512c310b577612c52603a412d1c6437413a7203a359135d6de924405676cebf552ca79617efc7f52a3ba8d3a3a79bf6d4cc689f3170822dd9de87ef13d7957571df657be480babb964e8f6a5c8d2ec830b8b4c78d070aa5bca859aa082db41cbaad7beefdeb216f36a8b9e4cc"])
syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x84040)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000240)=0x81)

07:27:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r6, 0xffffffffffffffff)

[  301.882760] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
[  301.906537] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
[  301.918882] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4306 comm=syz-executor.4
[  301.987544] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
07:27:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, 0xffffffffffffffff, r6)

[  302.102595] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4317 comm=syz-executor.4
07:27:50 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:28:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:28:05 executing program 0:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0))
pipe(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x4, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49)
r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc244, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0xfffffffffffffffc, 0xfffffffd, 0x9, 0x1, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x10}}], 0x2, 0x480b0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/230, 0xe6}, {&(0x7f0000001780)=""/164, 0xa4}, {}, {&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000200)}]}, &(0x7f00000001c0)="007a89ab11ee", &(0x7f0000000580)=""/199, 0x0, 0x0, 0xfffffffd, 0x0})
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2})
fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4098)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffff9})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd})

[  316.991893] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4341 comm=syz-executor.4
07:28:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, 0xffffffffffffffff, r6)

07:28:05 executing program 7:
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsmount(r0, 0x0, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000002)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='clear_refs\x00')
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6b02, 0x0)
openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x42a00, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r6, 0x0, 0x100000001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0)

07:28:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a330012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,nnonumtail=1,shortname=winnt,nnonumtail=1,iocharset=cp932,shortname=win95,nnonumtail=1,shortname=win95,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsXloor=\x00,\x00'])
mknodat$null(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000480), 0xb00440, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000010001,nodevmap,msize=0x000000000000992d,posixacl,loose,loose,access=user,obj_role=vfat\x00,appraise_type=imasig,euid>', @ANYRESDEC=r2, @ANYBLOB="000018e2ad020517c9041f232e34fb827b65e78c2df1b6bc078b4c4d443bebac6d42d85971c707b5c380c3f243a58aeb9f7c4f12dcf1ad1a8baf07af8066011405d4aac6307bb53faa9f09bba5f3deb0e11403c469b0ddf777d0ae51e86992b4c6a9ba188512c310b577612c52603a412d1c6437413a7203a359135d6de924405676cebf552ca79617efc7f52a3ba8d3a3a79bf6d4cc689f3170822dd9de87ef13d7957571df657be480babb964e8f6a5c8d2ec830b8b4c78d070aa5bca859aa082db41cbaad7beefdeb216f36a8b9e4cc"])
syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x84040)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/30, 0x1b}], 0x1, 0x3, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000240)=0x81)

07:28:05 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:28:05 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5225)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x882c2, 0x0)
sendfile(r2, r0, 0x0, 0x1)
syz_io_uring_setup(0x2bab, &(0x7f00000000c0)={0x0, 0x6990, 0x4, 0x1, 0xb}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r3=>0x0)
r4 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
sendfile(r5, r6, 0x0, 0x100000001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x89073, r5, 0x0)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x4a101, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc3}})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
fremovexattr(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="91b3901e8ea8062d"])
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4004, @fd_index=0x2, 0x5, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x7)
write$cgroup_type(r0, &(0x7f00000001c0), 0x9)

07:28:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d4, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0xffffffffffffffff, 0x80000006, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsu(0x0, 0x0, 0x8000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100))
r3 = creat(0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef)
fallocate(r3, 0x8, 0x0, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff})
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3)
creat(0x0, 0x111)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x128)
fallocate(r0, 0x0, 0x0, 0x1000002)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0xffffffffffffffff, r6, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@access_any}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_gt={'uid>', r6}}, {@smackfsdef={'smackfsdef', 0x3d, ',}}'}}, {@permit_directio}, {@dont_measure}, {@fowner_gt}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0)

[  316.999791] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
[  317.052817] tmpfs: Bad value for 'size'
07:28:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, 0xffffffffffffffff, r6)

[  317.261409] 9pnet: Insufficient options for proto=fd
[  317.300808] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4354 comm=syz-executor.4
07:28:05 executing program 1:
r0 = socket(0x1d, 0x1, 0x1f)
getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
prlimit64(0x0, 0x0, &(0x7f0000000200)={0x6, 0x9}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r1=>0x0)
prlimit64(r1, 0x0, &(0x7f00000000c0)={0x1, 0x80000000}, &(0x7f0000000100))
r2 = fork()
prlimit64(r2, 0xf, &(0x7f0000000000)={0xef5, 0x3}, &(0x7f0000000040))

07:28:05 executing program 0:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0))
pipe(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x4, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49)
r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc244, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0xfffffffffffffffc, 0xfffffffd, 0x9, 0x1, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x10}}], 0x2, 0x480b0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/230, 0xe6}, {&(0x7f0000001780)=""/164, 0xa4}, {}, {&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000200)}]}, &(0x7f00000001c0)="007a89ab11ee", &(0x7f0000000580)=""/199, 0x0, 0x0, 0xfffffffd, 0x0})
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2})
fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4098)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffff9})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd})

07:28:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

[  317.552844] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4369 comm=syz-executor.4
07:28:05 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000f0ffff00000000000000000000000000000000000000000000000000000000866182a517010f0000000000000000000000000000000000000000000000000000000000000010000000000000000706fe4989a8afaccd1f939a2b57045a00000000000000000000000000000000000000000000e30000007b5bd9eeec9df1ab2cb371a413ae03b486a49036b40c787c051d3b92ed11c102558df1b935752848b47cc7f935da3eedf4661c5cf6bcd062a427044e08c2fa419fb54f65535b9b2bb8f17b62eeae10ac0fa95bcdeba26613e045d2128ecdccb542545ec6b20b2f99206bdc91946a18dff41a79ae459e77d0b0745dfa40d6f84a8fe449d7f5412c6bc01279f39035892d36f9937889faf7a8ea779a7dc86274b48fcf86e1f907fd18fdae3983cfd8faf68e7f5591b53318c665a8d24fc18f87464a7a2061ef1c93d03539473abedc4c1f733dde2b03f8ca360503a8d2"], 0xb8}}, 0x0)
r1 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x0, 0x800, 0x2})
r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00')
dup3(0xffffffffffffffff, r2, 0x0)
syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x0, 0x3, 0x256, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps\x00')
syz_io_uring_setup(0x67c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000380))
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x2, 0xffff, 0xfa, &(0x7f0000000c40)=""/250})
pipe2(&(0x7f00000014c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xc000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000003c0))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="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", 0x600, 0x40000002, 0x3, {0x0, r6}}, 0x8)
openat(r3, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  317.649316] cgroup: fork rejected by pids controller in /syz4
07:28:05 executing program 0:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0))
pipe(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x4, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49)
r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc244, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0xfffffffffffffffc, 0xfffffffd, 0x9, 0x1, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x10}}], 0x2, 0x480b0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/230, 0xe6}, {&(0x7f0000001780)=""/164, 0xa4}, {}, {&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000200)}]}, &(0x7f00000001c0)="007a89ab11ee", &(0x7f0000000580)=""/199, 0x0, 0x0, 0xfffffffd, 0x0})
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2})
fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4098)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffff9})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd})

07:28:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="008fadcfdb9cf032a4169e8960a95e0400e4", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010896344202110000000806110000000000000000000000000064000100000602020202020201089b848b960c"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @device_a, @broadcast, @random="25a63fd8f27f", {0x4, 0xff}}, @ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x0, 0x44, @random=0x9, @val, @val={0x2d, 0x1a, {0x80, 0x0, 0x7, 0x0, {0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x6}}, [{0xdd, 0xea, "c19a7e3a35bd6b94df8006589292b7e3909921f1a0d241675a1dc170a072658762e03c75b99d2d9efbc2894a01b0a80b2e4950ae44c6f147a12588430179aca32fb2f52405d11102ab4d0e4ca388aae49a257e3e601b241df47613a499c105b6a9fdd80ce9d9fe5aa05a8de5f5041c174c0aabca0952a39605bfaadba780d9e5193d4d43100404183b900f99feb498e9f187289bc4fdb2773032e0bc95ea4a6277a19240e12a0669a2d33376b235300e7fb0e26c45b13050be51725a490b6f037727d1d378e5b913fabadcb338bbbef919363521ac9536667c86d91c1a46f5e04e78cc592e1a750d3b5b"}, {0xdd, 0x82, "9150f7cec2c7041c4c43763d9fed74647ff300d2c78c99147394456d2fa278e3d42a4d651409741777eb686bb02200e3593017d41584aca2218f91de7c61f78f7633e8fac9005beac2b23d99ec4df4b89d0266a22fc3927af72ea4005e6f827d63212ce10d55fd30b87c2926e03452a3fc0f5102b025db7bef06cb6466422c1fb8f3"}]}, 0x1b0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000ce570127b76baa884f5248a9"], 0x28)

[  317.785896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.842584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.864549] tmpfs: Bad value for 'size'
[  317.894960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.198897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.249067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.699477] Bluetooth: hci6: command 0x0406 tx timeout
[  318.699994] Bluetooth: hci2: command 0x0406 tx timeout
[  318.700482] Bluetooth: hci1: command 0x0406 tx timeout
[  318.700938] Bluetooth: hci4: command 0x0406 tx timeout
[  318.701522] Bluetooth: hci0: command 0x0406 tx timeout
[  318.701987] Bluetooth: hci5: command 0x0406 tx timeout
[  318.702471] Bluetooth: hci3: command 0x0406 tx timeout
[  318.702930] Bluetooth: hci7: command 0x0406 tx timeout
07:28:20 executing program 0:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0))
pipe(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x4, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49)
r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc244, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0xfffffffffffffffc, 0xfffffffd, 0x9, 0x1, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x10}}], 0x2, 0x480b0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/230, 0xe6}, {&(0x7f0000001780)=""/164, 0xa4}, {}, {&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000200)}]}, &(0x7f00000001c0)="007a89ab11ee", &(0x7f0000000580)=""/199, 0x0, 0x0, 0xfffffffd, 0x0})
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2})
fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4098)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffff9})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd})

07:28:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="008fadcfdb9cf032a4169e8960a95e0400e4", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010896344202110000000806110000000000000000000000000064000100000602020202020201089b848b960c"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @device_a, @broadcast, @random="25a63fd8f27f", {0x4, 0xff}}, @ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x0, 0x44, @random=0x9, @val, @val={0x2d, 0x1a, {0x80, 0x0, 0x7, 0x0, {0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x6}}, [{0xdd, 0xea, "c19a7e3a35bd6b94df8006589292b7e3909921f1a0d241675a1dc170a072658762e03c75b99d2d9efbc2894a01b0a80b2e4950ae44c6f147a12588430179aca32fb2f52405d11102ab4d0e4ca388aae49a257e3e601b241df47613a499c105b6a9fdd80ce9d9fe5aa05a8de5f5041c174c0aabca0952a39605bfaadba780d9e5193d4d43100404183b900f99feb498e9f187289bc4fdb2773032e0bc95ea4a6277a19240e12a0669a2d33376b235300e7fb0e26c45b13050be51725a490b6f037727d1d378e5b913fabadcb338bbbef919363521ac9536667c86d91c1a46f5e04e78cc592e1a750d3b5b"}, {0xdd, 0x82, "9150f7cec2c7041c4c43763d9fed74647ff300d2c78c99147394456d2fa278e3d42a4d651409741777eb686bb02200e3593017d41584aca2218f91de7c61f78f7633e8fac9005beac2b23d99ec4df4b89d0266a22fc3927af72ea4005e6f827d63212ce10d55fd30b87c2926e03452a3fc0f5102b025db7bef06cb6466422c1fb8f3"}]}, 0x1b0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000ce570127b76baa884f5248a9"], 0x28)

07:28:20 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)
r1 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x0, 0x800, 0x2})
r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00')
dup3(0xffffffffffffffff, r2, 0x0)
syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x0, 0x3, 0x256, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps\x00')
syz_io_uring_setup(0x67c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000380))
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x2, 0xffff, 0xfa, &(0x7f0000000c40)=""/250})
pipe2(&(0x7f00000014c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xc000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000003c0))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="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", 0x600, 0x40000002, 0x3, {0x0, r6}}, 0x8)
openat(r3, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

07:28:20 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:28:20 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:28:20 executing program 7:
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsmount(r0, 0x0, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000002)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='clear_refs\x00')
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6b02, 0x0)
openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x42a00, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r6, 0x0, 0x100000001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0)

07:28:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  331.989495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4512 comm=syz-executor.4
[  331.992266] tmpfs: Bad value for 'size'
[  332.089281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.143205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:28:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:28:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

[  332.193968] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4621 comm=syz-executor.4
[  332.198634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:28:20 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:20 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:28:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

[  332.419206] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4734 comm=syz-executor.4
07:28:20 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:20 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)

07:28:20 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24ea2, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4f1f8abf8b4707c7, 0x8)
ftruncate(r0, 0x1000003)
ftruncate(0xffffffffffffffff, 0xfffffffffffffffe)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
lseek(r1, 0xffff, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x142)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r3, 0x400, 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x12008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
lseek(r2, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x100000001)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001080000180000002fe7797acd0aa733a455a2418fec561872f87892a966dc3c02627e36693a331b0ab9c6267b3d06a52b63732cf1f2c1a6509adbeafa3e6a8a75e6abf0f4aaa3e38a4fd9338f0990c504241a4fe0aaa8ca014b82f454215403595f4a20c99c3ab5bd0b10c1de51751665213dfcfde1ddc5b64d50dce48c07dd7dccd0c9fa5e36e325d4de29f98f1b38084fb021602c52356bd0c7473ad8a4943d4be22ce9ea1bd96e61ec9ced03554595006ca5863160049926", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])

07:28:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

[  332.678703] 9pnet_virtio: no channels available for device syz
[  332.701507] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4850 comm=syz-executor.4
[  332.848806] 9pnet_virtio: no channels available for device syz
[  332.947856] syz-executor.7 (4508) used greatest stack depth: 23600 bytes left
07:28:35 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c3, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000002)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
getpeername(r0, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80)
process_vm_readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/188, 0xbc}], 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)

07:28:35 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x32)
openat(r7, &(0x7f0000000240)='./file0\x00', 0x0, 0x8)

07:28:35 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)

07:28:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:28:35 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)

07:28:35 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:28:35 executing program 7:
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsmount(r0, 0x0, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000002)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='clear_refs\x00')
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6b02, 0x0)
openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x42a00, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r6, 0x0, 0x100000001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0)

07:28:35 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  346.876094] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=4973 comm=syz-executor.4
[  346.906818] tmpfs: Bad value for 'size'
07:28:35 executing program 5:
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x4, 0x0, 0x0, 0x21c}})

[  347.056632] 9pnet_virtio: no channels available for device syz
07:28:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(0xffffffffffffffff, r3)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:28:35 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0x32)

[  347.090564] 9pnet_virtio: no channels available for device syz
[  347.171282] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5088 comm=syz-executor.4
07:28:35 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)

07:28:35 executing program 5:
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x4, 0x0, 0x0, 0x21c}})

07:28:35 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)

07:28:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(0xffffffffffffffff, r3)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:28:35 executing program 5:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = pkey_alloc(0x0, 0x0)
r1 = pkey_alloc(0x0, 0x5)
pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
creat(&(0x7f0000000080)='./file1\x00', 0x18a)
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0)
mbind(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x0, 0x3)
pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0)
creat(&(0x7f00000000c0)='./file1\x00', 0x1)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff)
move_pages(0x0, 0x6, &(0x7f0000000140)=[&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6)
mbind(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x7, 0xdc, 0x5)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0x2, 0x5, 0x2)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000ff0000/0x3000)=nil)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, r1)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800)
r2 = creat(&(0x7f0000000240)='./file1\x00', 0xc7)
fallocate(r2, 0x0, 0x0, 0x8800000)

[  347.495748] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5202 comm=syz-executor.4
07:28:35 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)

[  347.530735] 9pnet_virtio: no channels available for device syz
07:28:35 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0x32)

[  347.646819] 9pnet_virtio: no channels available for device syz
07:28:36 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:28:36 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0x32)

07:28:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)

07:28:50 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)

07:28:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:28:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0x32)

07:28:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(0xffffffffffffffff, r3)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:28:50 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0x32)

07:28:50 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:28:50 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)

[  362.267982] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5334 comm=syz-executor.4
07:28:50 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2)

[  362.298208] tmpfs: Bad value for 'size'
[  362.415632] 9pnet_virtio: no channels available for device syz
07:29:05 executing program 3:
lseek(0xffffffffffffffff, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:29:05 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:29:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)

07:29:05 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
timer_delete(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020301030003000001080005400000000200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000004)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000380))
clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:29:05 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="001d00000000a6c8"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:29:05 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:29:05 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x2802422, &(0x7f0000000180)='cgroup\x00')
mount$cgroup(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='none='])
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1f}}, './file0/../file0\x00'})
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)

[  377.229151] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5465 comm=syz-executor.4
[  377.240879] cgroup: Unexpected value for 'none'
[  377.242384] cgroup: Unexpected value for 'none'
[  377.245697] tmpfs: Bad value for 'size'
07:29:05 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2, 0x9d31}, 0x10088, 0x0, 0xfff7fffe, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x0, 0x27f})
open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00a95ff0ee32509de5d860d3ebf4fb0000000000010000000000000000002004084300"], 0x200400)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1a)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5fb3, 0x0, 0x0, 0x3de}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(r0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e6360041000800e32e0000cefcedcc64456dc3026fc7270300a28ce2027dbce931d3c1e856039483a6d10d69c19cc92a89e0e8006ce9f69506f65fc3feb2256df4c61766ec22dd8396f76e850b8d3035aa2c23e6c22e307dc74700f8885091ba978fbdad6e124ba2bc1e9df5de27d4bbec230e10d7d02503affba9900000000000000409c88a214bfe07b082b5ffca5776cbbcf8f2b64c41e71decf350a8a8b9b786ef0ec95df34b3fcc383ea5cec439fa77eb27905c2272dbd9baefd9b233b257473542c3745d26909cb65f1f175817b6d218cf9a0301000000000000"], 0x54, 0x1)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256])
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x16)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
fcntl$setpipe(r2, 0x407, 0xffff)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)

07:29:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90)

07:29:05 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  377.421628] 9pnet_virtio: no channels available for device syz
07:29:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:29:05 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  377.563846] 9pnet_virtio: no channels available for device syz
07:29:05 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

[  377.649037] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5586 comm=syz-executor.4
[  377.668478] tmpfs: Bad value for 'size'
07:29:05 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2, 0x9d31}, 0x10088, 0x0, 0xfff7fffe, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x0, 0x27f})
open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00a95ff0ee32509de5d860d3ebf4fb0000000000010000000000000000002004084300"], 0x200400)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1a)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5fb3, 0x0, 0x0, 0x3de}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(r0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e6360041000800e32e0000cefcedcc64456dc3026fc7270300a28ce2027dbce931d3c1e856039483a6d10d69c19cc92a89e0e8006ce9f69506f65fc3feb2256df4c61766ec22dd8396f76e850b8d3035aa2c23e6c22e307dc74700f8885091ba978fbdad6e124ba2bc1e9df5de27d4bbec230e10d7d02503affba9900000000000000409c88a214bfe07b082b5ffca5776cbbcf8f2b64c41e71decf350a8a8b9b786ef0ec95df34b3fcc383ea5cec439fa77eb27905c2272dbd9baefd9b233b257473542c3745d26909cb65f1f175817b6d218cf9a0301000000000000"], 0x54, 0x1)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256])
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x16)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
fcntl$setpipe(r2, 0x407, 0xffff)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)

[  377.835134] 9pnet_virtio: no channels available for device syz
[  392.022158] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5715 comm=syz-executor.4
[  392.045358] tmpfs: Bad value for 'size'
07:29:20 executing program 3:
lseek(0xffffffffffffffff, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:29:20 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:29:20 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:29:20 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:20 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
timer_delete(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020301030003000001080005400000000200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000004)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000380))
clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:29:20 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

[  392.203063] 9pnet_virtio: no channels available for device syz
[  392.253423] 9pnet_virtio: no channels available for device syz
07:29:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:29:20 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:29:20 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  392.461646] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=5839 comm=syz-executor.4
[  392.492703] tmpfs: Bad value for 'size'
07:29:20 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

[  392.691656] 9pnet_virtio: no channels available for device syz
[  392.860018] 9pnet_virtio: no channels available for device syz
07:29:21 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:29:21 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:21 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:21 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:21 executing program 3:
lseek(0xffffffffffffffff, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:29:21 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  393.188561] 9pnet_virtio: no channels available for device syz
07:29:21 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  393.202708] tmpfs: Bad value for 'size'
07:29:21 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

[  393.239769] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6067 comm=syz-executor.4
[  393.252929] 9pnet_virtio: no channels available for device syz
[  393.403608] 9pnet_virtio: no channels available for device syz
[  393.651779] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6175 comm=syz-executor.4
07:29:21 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:29:36 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
timer_delete(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020301030003000001080005400000000200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000004)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000380))
clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:29:36 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:36 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:29:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="cc71ff437f63b1ad13e2d97be59da1a0ce5bbb9985b6cdc68b82db7d6433f338da3f190740f22d83f8170dc3ccd9b566968b70057488bc9f05f14c353440d0d75481efc5f8b02044b34e97bfa71e993a21e775ab5067be0768b050d26f725c3b6c8064ca8ae30195ff71e4bfabfa84a1b0f37c25f526a09c5f6ffd5ff21b43372345c3b402271b83fdf0a1bfd7c7e286c8ce1a526186050c0ded7019cdbab71abeb49f365ee227586898d3db638e9d69844cb69403df824b13d5fe58f785f20c8fc8564dfec3fc4f7d47e5779586848d8ae748bc94", 0xd5, 0x4000, 0xb4f3f0bccf7c0e6e}, 0x8)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:36 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:36 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:29:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:29:36 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  408.167475] 9pnet_virtio: no channels available for device syz
[  408.205249] tmpfs: Bad value for 'size'
[  408.217119] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6296 comm=syz-executor.4
07:29:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:36 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  408.373924] 9pnet_virtio: no channels available for device syz
07:29:36 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  408.397076] 9pnet_virtio: no channels available for device syz
07:29:36 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:36 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  408.504283] tmpfs: Bad value for 'size'
[  408.512978] 9pnet_virtio: no channels available for device syz
[  408.570187] 9pnet_virtio: no channels available for device syz
07:29:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

[  408.685304] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6419 comm=syz-executor.4
[  408.756985] 9pnet_virtio: no channels available for device syz
07:29:51 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:29:51 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:29:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:29:51 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:51 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
timer_delete(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020301030003000001080005400000000200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000004)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000380))
clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  422.950897] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6439 comm=syz-executor.4
07:29:51 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:51 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  422.980541] tmpfs: Bad value for 'size'
[  423.030914] 9pnet_virtio: no channels available for device syz
[  423.048644] 9pnet_virtio: no channels available for device syz
07:29:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:29:51 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  423.149955] tmpfs: Bad value for 'size'
[  423.160298] 9pnet_virtio: no channels available for device syz
07:29:51 executing program 1:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:29:51 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:29:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  423.228021] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6560 comm=syz-executor.4
07:29:51 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:29:51 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  423.320538] 9pnet_virtio: no channels available for device syz
07:29:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  423.373842] tmpfs: Bad value for 'size'
07:29:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  423.436110] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6572 comm=syz-executor.4
[  423.460091] audit: type=1400 audit(1727076591.734:13): avc:  denied  { read } for  pid=6566 comm="iou-wrk-6567" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  423.534072] 9pnet_virtio: no channels available for device syz
07:30:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:09 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:09 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:30:09 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:30:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:09 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  440.998830] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6695 comm=syz-executor.4
07:30:09 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  441.034557] tmpfs: Bad value for 'size'
[  441.135721] 9pnet_virtio: no channels available for device syz
07:30:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  441.171817] 9pnet_virtio: no channels available for device syz
07:30:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  441.187149] 9pnet_virtio: no channels available for device syz
07:30:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:09 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

[  441.276477] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6816 comm=syz-executor.4
[  441.284031] 9pnet_virtio: no channels available for device syz
07:30:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  441.360721] 9pnet_virtio: no channels available for device syz
07:30:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:09 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  441.611089] 9pnet_virtio: no channels available for device syz
[  441.694761] 9pnet_virtio: no channels available for device syz
07:30:23 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:23 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:30:23 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:30:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:30:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:23 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  455.604288] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=6941 comm=syz-executor.4
[  455.650342] tmpfs: Bad value for 'size'
[  455.722659] 9pnet_virtio: no channels available for device syz
[  455.727234] 9pnet_virtio: no channels available for device syz
07:30:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  455.816676] 9pnet_virtio: no channels available for device syz
07:30:24 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:24 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:30:24 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  455.918677] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7062 comm=syz-executor.4
07:30:24 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:24 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:24 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  456.069188] 9pnet_virtio: no channels available for device syz
[  456.132030] 9pnet_virtio: no channels available for device syz
[  456.149750] 9pnet_virtio: no channels available for device syz
[  456.197276] 9pnet_virtio: no channels available for device syz
[  470.355300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7182 comm=syz-executor.4
07:30:38 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:30:38 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
syz_io_uring_complete(r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:38 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:30:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:30:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:30:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:30:38 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  470.501732] 9pnet_virtio: no channels available for device syz
[  470.576800] 9pnet_virtio: no channels available for device syz
[  470.582216] tmpfs: Bad value for 'size'
07:30:38 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r2=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
clock_gettime(0x0, &(0x7f0000000400))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

[  470.636560] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7305 comm=syz-executor.4
07:30:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  470.663015] 9pnet_virtio: no channels available for device syz
07:30:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:30:38 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:39 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

[  470.864670] 9pnet_virtio: no channels available for device syz
[  470.938583] 9pnet_virtio: no channels available for device syz
07:30:54 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:54 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:30:54 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:30:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:30:54 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:30:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})

07:30:54 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r2=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
clock_gettime(0x0, &(0x7f0000000400))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  486.164573] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7430 comm=syz-executor.4
[  486.207149] tmpfs: Bad value for 'size'
[  486.270858] 9pnet_virtio: no channels available for device syz
[  486.338696] 9pnet_virtio: no channels available for device syz
07:30:54 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:30:54 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  486.402267] tmpfs: Bad value for 'size'
07:30:54 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  486.482274] 9pnet_virtio: no channels available for device syz
[  486.501823] 9pnet_virtio: no channels available for device syz
[  486.506186] 9pnet_virtio: no channels available for device syz
07:30:54 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:54 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:30:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r2=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1)
clock_gettime(0x0, &(0x7f0000000400))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:30:54 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  486.664081] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7570 comm=syz-executor.4
[  486.683607] 9pnet_virtio: no channels available for device syz
[  486.688649] 9pnet_virtio: no channels available for device syz
07:30:55 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  486.899010] 9pnet_virtio: no channels available for device syz
[  500.617223] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7694 comm=syz-executor.4
[  500.632918] tmpfs: Bad value for 'size'
07:31:08 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:08 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:08 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  500.669516] tmpfs: Bad value for 'size'
07:31:08 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0)
syz_io_uring_complete(r2)
clock_gettime(0x0, &(0x7f0000000400))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:08 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:08 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:31:08 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:08 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:31:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2a00000029010079c500000801000000050000000000000006000000000000004007002e2f66696c65307e67c320d1f53d9246e9b29909cc5738a5a410854744792cf2102abcdb3f91a5394f6612f29105d8315a405e7d47c69cca31e90aa48c0df3d8676d051eb9c04e539604bc0aa596145f33821cc74a65c2ded8696a484358e7da5a23a3417782faa04780d94e3b88630d576f11f27df05a55fd56d2c3d4e0fa5b041c5b72b33819d45ac0cbd99e2c3c7a73c07bdd2d4da9"], 0x2a)
syz_io_uring_complete(r1)
clock_gettime(0x0, &(0x7f0000000400))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  500.735975] 9pnet_virtio: no channels available for device syz
[  500.753629] 9pnet_virtio: no channels available for device syz
[  500.765619] 9pnet_virtio: no channels available for device syz
07:31:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:09 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
fsmount(0xffffffffffffffff, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:31:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(r1)
clock_gettime(0x0, &(0x7f0000000400))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  500.955455] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7815 comm=syz-executor.4
07:31:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_complete(r1)
clock_gettime(0x0, &(0x7f0000000400))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  501.029573] 9pnet_virtio: no channels available for device syz
[  501.052846] 9pnet_virtio: no channels available for device syz
[  501.070755] 9pnet_virtio: no channels available for device syz
07:31:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_complete(r1)
clock_gettime(0x0, &(0x7f0000000400))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  501.267197] 9pnet_virtio: no channels available for device syz
07:31:23 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
fsmount(0xffffffffffffffff, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:31:23 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:31:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x2, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_complete(r1)
clock_gettime(0x0, &(0x7f0000000400))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:23 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:23 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:23 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_rm_watch(r3, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  515.402932] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=7928 comm=syz-executor.4
07:31:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  515.446637] tmpfs: Bad value for 'size'
[  515.479775] tmpfs: Bad value for 'size'
[  515.562017] 9pnet_virtio: no channels available for device syz
07:31:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  515.600167] 9pnet_virtio: no channels available for device syz
07:31:23 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
fsmount(0xffffffffffffffff, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:31:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  515.686957] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=8053 comm=syz-executor.4
07:31:23 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:24 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:24 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:24 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  515.954988] 9pnet_virtio: no channels available for device syz
07:31:38 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_rm_watch(r3, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:38 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  529.789655] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=8186 comm=syz-executor.4
[  529.794579] tmpfs: Bad value for 'size'
07:31:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:38 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:38 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  529.809744] tmpfs: Bad value for 'size'
07:31:38 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  529.850667] 9pnet_virtio: no channels available for device syz
07:31:38 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:38 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  529.986401] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=8199 comm=syz-executor.4
[  530.001972] tmpfs: Bad value for 'size'
07:31:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  530.066007] perf: interrupt took too long (3172 > 3158), lowering kernel.perf_event_max_sample_rate to 63000
[  530.123174] 9pnet_virtio: no channels available for device syz
[  530.153256] perf: interrupt took too long (3969 > 3965), lowering kernel.perf_event_max_sample_rate to 50000
[  530.158053] perf: interrupt took too long (4968 > 4961), lowering kernel.perf_event_max_sample_rate to 40000
07:31:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:31:54 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_rm_watch(r3, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:54 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:54 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:54 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:54 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:54 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  545.843108] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=8329 comm=syz-executor.4
[  545.893406] perf: interrupt took too long (6212 > 6210), lowering kernel.perf_event_max_sample_rate to 32000
[  545.902322] tmpfs: Bad value for 'size'
[  545.934965] tmpfs: Bad value for 'size'
[  545.935189] 9pnet_virtio: no channels available for device syz
[  545.954919] 9pnet_virtio: no channels available for device syz
07:31:54 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:31:54 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:31:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:54 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r4)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  546.111766] tmpfs: Bad value for 'size'
07:31:54 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:54 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:31:54 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  546.219944] tmpfs: Bad value for 'size'
07:31:54 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  546.252891] 9pnet_virtio: no channels available for device syz
[  546.315094] 9pnet_virtio: no channels available for device syz
07:32:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:09 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:32:09 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:32:09 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r4)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:09 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  560.959158] tmpfs: Bad value for 'size'
[  560.959858] 9pnet_virtio: no channels available for device syz
[  560.966744] tmpfs: Bad value for 'size'
[  560.987815] 9pnet_virtio: no channels available for device syz
07:32:09 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:09 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  561.173695] 9pnet_virtio: no channels available for device syz
[  561.209002] 9pnet_virtio: no channels available for device syz
07:32:09 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:09 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:32:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  561.322975] tmpfs: Bad value for 'size'
[  561.420650] 9pnet_virtio: no channels available for device syz
07:32:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:32:23 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:23 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:23 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r4)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:23 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r0, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:32:23 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  575.559823] tmpfs: Bad value for 'size'
[  575.570837] 9pnet_virtio: no channels available for device syz
[  575.579588] 9pnet_virtio: no channels available for device syz
[  575.592258] tmpfs: Bad value for 'size'
07:32:23 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:23 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:23 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  575.705894] 9pnet_virtio: no channels available for device syz
[  575.720207] tmpfs: Bad value for 'size'
[  575.736829] 9pnet_virtio: no channels available for device syz
07:32:24 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r0, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:32:38 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:38 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:32:38 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
fcntl$dupfd(r4, 0x406, 0xffffffffffffffff)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  590.218834] tmpfs: Bad value for 'size'
[  590.232188] 9pnet_virtio: no channels available for device syz
[  590.234049] tmpfs: Bad value for 'size'
[  590.244235] 9pnet_virtio: no channels available for device syz
07:32:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  590.349119] 9pnet_virtio: no channels available for device syz
[  590.396946] tmpfs: Bad value for 'size'
07:32:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  590.402684] 9pnet_virtio: no channels available for device syz
07:32:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r0, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
listen(0xffffffffffffffff, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = dup2(0xffffffffffffffff, r2)
accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRES16])
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fork()
r8 = fork()
kcmp(r7, r8, 0x0, r5, r6)

07:32:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  590.494654] 9pnet_virtio: no channels available for device syz
[  590.546221] 9pnet_virtio: no channels available for device syz
07:32:54 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:54 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  606.672120] tmpfs: Bad value for 'size'
[  606.696653] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9203 comm=syz-executor.4
07:32:54 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
fcntl$dupfd(r4, 0x406, 0xffffffffffffffff)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:54 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:54 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:54 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  606.714001] tmpfs: Bad value for 'size'
[  606.722626] 9pnet_virtio: no channels available for device syz
07:32:55 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:55 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  606.807175] 9pnet_virtio: no channels available for device syz
07:32:55 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:55 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:32:55 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:32:55 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:32:55 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  606.942815] 9pnet_virtio: no channels available for device syz
[  606.945844] 9pnet_virtio: no channels available for device syz
[  606.952701] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9322 comm=syz-executor.4
07:32:55 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
fcntl$dupfd(r4, 0x406, 0xffffffffffffffff)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:32:55 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  607.025340] tmpfs: Bad value for 'size'
07:33:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  621.002912] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9445 comm=syz-executor.4
[  621.025770] 9pnet_virtio: no channels available for device syz
[  621.028060] tmpfs: Bad value for 'size'
[  621.036598] 9pnet_virtio: no channels available for device syz
07:33:09 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:33:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:33:09 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:09 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:33:09 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:09 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:33:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:09 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:09 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:33:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  621.194026] 9pnet_virtio: no channels available for device syz
[  621.208775] 9pnet_virtio: no channels available for device syz
07:33:09 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  621.265637] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9570 comm=syz-executor.4
[  635.604949] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9583 comm=syz-executor.4
07:33:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:23 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:33:23 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:23 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:23 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:23 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:33:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

[  635.656647] 9pnet_virtio: no channels available for device syz
[  635.659479] tmpfs: Bad value for 'size'
[  635.670073] 9pnet_virtio: no channels available for device syz
07:33:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10)

07:33:24 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:24 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:24 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:24 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)

07:33:24 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  635.881999] 9pnet_virtio: no channels available for device syz
[  635.891725] 9pnet_virtio: no channels available for device syz
[  635.949109] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9709 comm=syz-executor.4
07:33:24 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  636.066927] 9pnet_virtio: no channels available for device syz
07:33:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:38 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:38 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:33:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:33:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  650.033298] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9826 comm=syz-executor.4
07:33:38 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)

[  650.072568] 9pnet_virtio: no channels available for device syz
07:33:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  650.084927] tmpfs: Bad value for 'size'
[  650.095796] 9pnet_virtio: no channels available for device syz
07:33:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000000400))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)

07:33:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  650.199860] 9pnet_virtio: no channels available for device syz
[  650.246898] 9pnet_virtio: no channels available for device syz
07:33:38 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  650.315419] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9949 comm=syz-executor.4
07:33:38 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(0xffffffffffffffff, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  650.339695] 9pnet_virtio: no channels available for device syz
[  650.339747] tmpfs: Bad value for 'size'
07:33:53 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(0xffffffffffffffff, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:53 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  664.818718] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=9968 comm=syz-executor.4
[  664.832860] 9pnet_virtio: no channels available for device syz
[  664.835208] tmpfs: Bad value for 'size'
[  664.847585] tmpfs: Bad value for 'size'
[  664.851769] 9pnet_virtio: no channels available for device syz
07:33:53 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:33:53 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:33:53 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:33:53 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  664.961931] 9pnet_virtio: no channels available for device syz
[  664.966031] 9pnet_virtio: no channels available for device syz
07:33:53 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:33:53 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  665.056281] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10091 comm=syz-executor.4
07:33:53 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  665.096906] 9pnet_virtio: no channels available for device syz
[  665.109960] 9pnet_virtio: no channels available for device syz
[  665.116570] tmpfs: Bad value for 'size'
07:33:53 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:33:53 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  665.208789] 9pnet_virtio: no channels available for device syz
07:34:07 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:34:07 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(0xffffffffffffffff, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:07 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:07 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:07 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:34:07 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r2}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:07 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  679.449365] tmpfs: Bad value for 'size'
[  679.454723] 9pnet_virtio: no channels available for device syz
[  679.463154] 9pnet_virtio: no channels available for device syz
[  679.470943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10128 comm=syz-executor.4
[  679.474044] tmpfs: Bad value for 'size'
07:34:07 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:07 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  679.571646] 9pnet_virtio: no channels available for device syz
07:34:07 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  679.585641] 9pnet_virtio: no channels available for device syz
07:34:07 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:07 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:07 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  679.683743] tmpfs: Bad value for 'size'
[  679.716176] 9pnet_virtio: no channels available for device syz
[  679.719807] 9pnet_virtio: no channels available for device syz
07:34:08 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:08 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:34:08 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  679.788186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10250 comm=syz-executor.4
[  679.842519] 9pnet_virtio: no channels available for device syz
07:34:28 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:28 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:34:28 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:28 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  700.371459] tmpfs: Bad value for 'size'
[  700.393846] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10272 comm=syz-executor.4
[  700.399912] 9pnet_virtio: no channels available for device syz
07:34:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  700.411886] tmpfs: Bad value for 'size'
[  700.449086] 9pnet_virtio: no channels available for device syz
07:34:28 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 0:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 1:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:34:28 executing program 1:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 0:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  700.632144] 9pnet_virtio: no channels available for device syz
[  700.652401] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10387 comm=syz-executor.4
07:34:28 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:28 executing program 0:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:29 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  700.749123] tmpfs: Bad value for 'size'
[  700.786854] tmpfs: Bad value for 'size'
[  700.797170] 9pnet_virtio: no channels available for device syz
07:34:43 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  714.959125] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10509 comm=syz-executor.4
07:34:43 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:43 executing program 1:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:43 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  715.004772] tmpfs: Bad value for 'size'
[  715.011720] tmpfs: Bad value for 'size'
[  715.027785] 9pnet_virtio: no channels available for device syz
07:34:43 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:43 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  715.251122] 9pnet_virtio: no channels available for device syz
07:34:43 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  715.345469] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10638 comm=syz-executor.4
07:34:58 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:58 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:34:58 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:34:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  729.818745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10751 comm=syz-executor.4
[  729.843883] 9pnet_virtio: no channels available for device syz
[  729.860548] tmpfs: Bad value for 'size'
07:34:58 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 7:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  730.025565] 9pnet_virtio: no channels available for device syz
07:34:58 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:34:58 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  730.080825] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10872 comm=syz-executor.4
07:34:58 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 7:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:34:58 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  730.209793] 9pnet_virtio: no channels available for device syz
07:34:58 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:35:12 executing program 7:
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  744.293050] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10991 comm=syz-executor.4
07:35:12 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:35:12 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  744.324849] tmpfs: Bad value for 'size'
[  744.344653] tmpfs: Bad value for 'size'
[  744.381922] 9pnet_virtio: no channels available for device syz
07:35:12 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 7:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  744.534186] 9pnet_virtio: no channels available for device syz
07:35:12 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  744.575932] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11115 comm=syz-executor.4
07:35:12 executing program 7:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:12 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  744.674817] 9pnet_virtio: no channels available for device syz
07:35:27 executing program 7:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:27 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:27 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:35:27 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:27 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:27 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:35:27 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  759.697871] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11241 comm=syz-executor.4
[  759.705840] 9pnet_virtio: no channels available for device syz
[  759.713785] tmpfs: Bad value for 'size'
[  759.721129] tmpfs: Bad value for 'size'
07:35:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:28 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  759.844976] 9pnet_virtio: no channels available for device syz
07:35:28 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:28 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  759.923925] 9pnet_virtio: no channels available for device syz
07:35:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  759.957696] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11359 comm=syz-executor.4
07:35:28 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  760.048861] 9pnet_virtio: no channels available for device syz
07:35:28 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  760.155916] 9pnet_virtio: no channels available for device syz
07:35:28 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:35:28 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  760.247107] 9pnet_virtio: no channels available for device syz
[  760.250297] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11470 comm=syz-executor.4
07:35:43 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:43 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:35:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  774.968534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11583 comm=syz-executor.4
[  774.972234] tmpfs: Bad value for 'size'
[  774.983836] tmpfs: Bad value for 'size'
[  774.985954] 9pnet_virtio: no channels available for device syz
[  774.998610] 9pnet_virtio: no channels available for device syz
07:35:43 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  775.141718] 9pnet_virtio: no channels available for device syz
[  775.146059] 9pnet_virtio: no channels available for device syz
07:35:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:35:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  775.203974] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11703 comm=syz-executor.4
07:35:43 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:43 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  775.275830] 9pnet_virtio: no channels available for device syz
[  775.279775] tmpfs: Bad value for 'size'
[  775.335729] 9pnet_virtio: no channels available for device syz
07:35:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  775.429896] 9pnet_virtio: no channels available for device syz
[  775.460536] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11823 comm=syz-executor.4
[  775.502872] 9pnet_virtio: no channels available for device syz
07:35:57 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:57 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:57 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:57 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:57 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:35:57 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  789.491927] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=11947 comm=syz-executor.4
[  789.500344] tmpfs: Bad value for 'size'
[  789.508496] tmpfs: Bad value for 'size'
[  789.510839] 9pnet_virtio: no channels available for device syz
[  789.564756] 9pnet_virtio: no channels available for device syz
07:35:57 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  789.614800] 9pnet_virtio: no channels available for device syz
07:35:57 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:57 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:35:57 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  789.720597] 9pnet_virtio: no channels available for device syz
07:35:58 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:35:58 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  789.778746] 9pnet_virtio: no channels available for device syz
07:35:58 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  789.811576] tmpfs: Bad value for 'size'
07:35:58 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  789.897006] tmpfs: Bad value for 'size'
[  789.942035] 9pnet_virtio: no channels available for device syz
07:36:11 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

[  803.661111] tmpfs: Bad value for 'size'
07:36:11 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:11 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:11 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:11 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:11 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:36:11 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  803.825660] 9pnet_virtio: no channels available for device syz
[  803.827509] tmpfs: Bad value for 'size'
[  803.835075] 9pnet_virtio: no channels available for device syz
07:36:12 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:12 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:12 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:12 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  803.945861] tmpfs: Bad value for 'size'
07:36:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000001050b00200000000300009098b9da"], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:36:12 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  803.989733] 9pnet_virtio: no channels available for device syz
[  803.993754] 9pnet_virtio: no channels available for device syz
07:36:12 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400)=<r1=>0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r2, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:12 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  804.079827] tmpfs: Bad value for 'size'
07:36:12 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  804.129545] 9pnet_virtio: no channels available for device syz
[  804.173976] 9pnet_virtio: no channels available for device syz
[  808.176780] kworker/dying (64) used greatest stack depth: 23304 bytes left
07:36:26 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:26 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:36:26 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:26 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  818.297545] tmpfs: Bad value for 'size'
07:36:26 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:36:26 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400)=<r1=>0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r2, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:26 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  818.396283] tmpfs: Bad value for 'size'
[  818.413853] 9pnet_virtio: no channels available for device syz
[  818.446779] 9pnet_virtio: no channels available for device syz
07:36:26 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:26 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400)=<r1=>0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r3, 0x406, r4)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r2, r5)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:26 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  818.541268] tmpfs: Bad value for 'size'
07:36:26 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x0, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  818.592551] 9pnet_virtio: no channels available for device syz
[  818.594865] 9pnet_virtio: no channels available for device syz
07:36:26 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:36:26 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:26 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r1, 0x406, r2)
r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r0, r3)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:26 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  818.671737] tmpfs: Bad value for 'size'
07:36:26 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:26 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r1, 0x406, r2)
r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r0, r3)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:27 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  818.778890] tmpfs: Bad value for 'size'
[  818.790682] 9pnet_virtio: no channels available for device syz
[  818.800798] 9pnet_virtio: no channels available for device syz
07:36:27 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r1, 0x406, r2)
r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r0, r3)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  818.886876] tmpfs: Bad value for 'size'
[  833.165924] tmpfs: Bad value for 'size'
07:36:41 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:36:41 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:41 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:41 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:41 executing program 6:
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:41 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:41 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  833.220609] 9pnet_virtio: no channels available for device syz
[  833.235693] tmpfs: Bad value for 'size'
07:36:41 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  833.297818] 9pnet_virtio: no channels available for device syz
07:36:41 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  833.415908] 9pnet_virtio: no channels available for device syz
07:36:41 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:41 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  833.526658] 9pnet_virtio: no channels available for device syz
07:36:55 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:55 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:36:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:36:56 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:36:56 executing program 6:
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  847.761495] 9pnet_virtio: no channels available for device syz
[  847.771648] tmpfs: Bad value for 'size'
[  847.785706] 9pnet_virtio: no channels available for device syz
[  847.790234] tmpfs: Bad value for 'size'
07:36:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  847.923768] 9pnet_virtio: no channels available for device syz
07:36:56 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  847.984315] 9pnet_virtio: no channels available for device syz
07:36:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, 0x0, &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  848.106594] 9pnet_virtio: no channels available for device syz
[  848.139832] 9pnet_virtio: no channels available for device syz
07:36:56 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:36:56 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

[  848.238784] 9pnet_virtio: no channels available for device syz
[  848.299561] 9pnet_virtio: no channels available for device syz
07:37:10 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:10 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:10 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:10 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:10 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:37:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:37:10 executing program 6:
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:10 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  862.180409] tmpfs: Bad value for 'size'
[  862.194781] 9pnet_virtio: no channels available for device syz
[  862.202543] tmpfs: Bad value for 'size'
[  862.211410] 9pnet_virtio: no channels available for device syz
07:37:10 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:10 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:10 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  862.319384] 9pnet_virtio: no channels available for device syz
07:37:10 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  862.422435] 9pnet_virtio: no channels available for device syz
[  862.441713] 9pnet_virtio: no channels available for device syz
07:37:10 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:10 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:37:10 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  862.517366] tmpfs: Bad value for 'size'
07:37:10 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  862.635538] 9pnet_virtio: no channels available for device syz
[  862.649175] perf: interrupt took too long (7857 > 7765), lowering kernel.perf_event_max_sample_rate to 25000
[  862.669634] 9pnet_virtio: no channels available for device syz
07:37:10 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  862.749691] perf: interrupt took too long (26331 > 9821), lowering kernel.perf_event_max_sample_rate to 7000
07:37:25 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:37:25 executing program 6:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:25 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:25 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:25 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:25 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:37:25 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  876.846708] 9pnet_virtio: no channels available for device syz
[  876.848002] tmpfs: Bad value for 'size'
[  876.853018] tmpfs: Bad value for 'size'
[  876.874855] 9pnet_virtio: no channels available for device syz
07:37:25 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  876.941113] 9pnet_virtio: no channels available for device syz
07:37:25 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:25 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:25 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  877.028484] 9pnet_virtio: no channels available for device syz
07:37:25 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:25 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:37:25 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:25 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  877.107633] 9pnet_virtio: no channels available for device syz
[  877.132530] tmpfs: Bad value for 'size'
[  877.140897] 9pnet_virtio: no channels available for device syz
07:37:25 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  891.455130] 9pnet_virtio: no channels available for device syz
07:37:39 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext, 0x205, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000f51d3b9032a26036a8ab08c7353ad1d22db5d3d0ad87ee24015fa381dc90f1eaf6ec833669589ca1f5f89fe77d4cf562431e59b21acbc1863043b1d579cb0b7af3f03531fa08e8946449174a5ce1ce7d726c75ba9022937a88d3d9a23475d8ef0b7c9771151d8af286516162ae0176a2f50efccd897b540ece5297d85aca3514d297af8fe6c001df09678e4f1a29a0fa4d911ec1f830d6dba61910995aa717a779e753c31132e87f4ec7c96604a1563a57434d353c400c082fb78ee72ad3368c0caa00"/230, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
fsmount(r1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
listen(0xffffffffffffffff, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = dup2(0xffffffffffffffff, r3)
accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16])
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x0, r6, r7)

07:37:39 executing program 6:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
inotify_rm_watch(r3, r6)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:37:39 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
lseek(r0, 0x2, 0x3)
syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000300)="ef50fbfcaccf9fcee88e4139122d2c42f9bdc21a8129004817a5c64ba4fbf2670a958c439e7458cb9f3864dcc38e2d2a665c0ed4128d0087cc52cc073d83b4b2810f7ec57cd62260454669eba313f298c38880f97d18dbd0ae6e0e74f95f6155a143ae017af47dcea771e47284d1f4d557a7dd10a9b99ac2dbeb8a27a3c87d22d4d4", 0x82, 0x3, 0x0)

07:37:39 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  891.467132] 9pnet_virtio: no channels available for device syz
[  891.490497] tmpfs: Bad value for 'size'
[  891.506995] tmpfs: Bad value for 'size'
07:37:39 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  891.575685] 9pnet_virtio: no channels available for device syz
07:37:39 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3417, &(0x7f0000000940)={0x0, 0x66d2, 0x20, 0x0, 0x22f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000a00))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x57b, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000200)="9147c976a4f31b7a46348aaaa5249967ce5322a0d08f19d01f65b5b542e0bd6e9e45d2246bf86f75c8410849e49fb8db5b4c3accb1a7c1dd25b6ad146be50cdf517a6a5575224726d941ad2464802712d728c136a67321d532c17c7d776b8323fc8288bf550052ce92e7547834ef01a3042a9bfd3582b1a48e609483aa13a92ab4cd08a4e832721959644db7", 0x8c, 0x3f}, {&(0x7f0000000440)="62b403748d648a1b241585972ea3d449beaa9179204f52eb40a0052a70ab12ef2ff3e3b7bf6a86bd4885b640047678b992ff046362300baae514", 0x3a, 0x3}, {&(0x7f0000000480)="d3b51a7eb272ce9aab8d7170c9e85689c77f53a1d223568c4b1aef669617fa71bcf6dfe18abb45c572848b530012199dad1d7db07358bb4cffc2e3086fe2c1881d7e5c22d2b4e47ae155ef1ddb58ecbccfc639e155cd1f08a22bd7a3a4c3e191dce4a14d78393f67e8004f4bc0697e593520cdfbe16dfcd0b183fd5e47f634b9b6cb56d43954f63eeb8516c4fddd549e1a19db09be59b800fbdd0b882abf8e265fdf343af7ab599c3d9061169cbf7c5c33b92f40425bece37c4eefe01d21c94177c1ea0517cba94513", 0xc9, 0x6}, {&(0x7f0000000580)="23d7eae97a5912f5aa62642dc36ff908f4bf995daf2e250422f70aadb240a765a7f4e556f9c66edf9c8e7d2ed8a73a23cdcb92264fe3ecf4281cab63", 0x3c, 0x3}, {&(0x7f00000005c0)="2c7c6c2a3256a04feb0c3bf8334ad29c22244ecb1f07ebfac803c5ea1c6aba678df58c62a98c5443030b8013c74c97b7eaee4b7fd293036d39c7bf538809182f530bdddbc24b49c46fcc8cb646ab9afa446ac6a8409e1473c9fc934247108ce951ad93c9365486d8b1a38ab1e10313caf5119def115d42cbc6d5ece94f34fdffe17fdf", 0x83, 0xffffffffffff0001}, {&(0x7f0000000680)="6f3a7f90bf0139756f9922ddad96b8fe9b27213c84dc4b127799dd9ce24d673e39586fdc55ad40f9c2cdc9593693431067510398297c4bd157ea0e1562f4a2191255996766f1c49518a6e4eded196f4cd686a7eed5e31e26a72721a6aae8c2580a365479daa4d9180a505b86d3c1", 0x6e, 0x4}, {&(0x7f0000000700)="5e6ef60c61473bdcdc6c9cb4e152e8b697913fb7edcff2c056faa2c4c3f2eb750f8e6c24315ca6dbf3f4deff2179d113b3d4e85fcd59b97bc41313ccb0f9e8f59831942d481020fda189273d2397e2c6d977864fbcb98d5823157dc6fe3ccc68c153f45b8d7a09e0f705fe3ef06d740cf3583bbbe0dad9c4bc285efe80c43d4ecdeaefd3404b3aa9967507ce9020d195635a5ae594d8b491518a3b34a81bd55dde09dca0473dc6a18f2794e23d759975c4443312c6e49d0561a79d5e0753504a517ef17cc02c114f6b4cfadbbe253ded20ba37566daf0bf2b793bd32ed5f", 0xde, 0xcd6c}, {&(0x7f0000000800)="3fce2c0bc19f9a2f7f5bb7093dbd662644f511397796d5c7875566f93179a79c02516e272c47ab88a382dc608e946bd4198f749fcacc41c98d3ba11c1b9362b95eee625e20a11a9a13b1632fde0fe682589cd2e478729882937176ddfc3161b5e8e1de5fd649cbe28d59b1d8abb32ae552f5ecc14f134ef00cce279f", 0x7c, 0x1}], 0x8, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x31, 0x2d, 0x31, 0x67, 0x37, 0x0, 0x2d, 0x31, 0x67, 0x70]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@mode}, {@huge_always}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}]})
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000880), 0x2, 0x0)
fcntl$dupfd(r4, 0x406, r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2)
openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  891.599595] 9pnet_virtio: no channels available for device syz
07:37:39 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

07:37:39 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0)
mount(&(0x7f00000003c0)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ceph\x00', 0x20020, &(0x7f0000000640)='fscontext')
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}, {}, {0x2, 0x4, r3}], {0x4, 0xa}, [{0x8, 0x1}], {0x10, 0x5}}, 0x44, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@version_u}, {@nodevmap}, {@aname={'aname', 0x3d, '--])}/+},.^*.['}}, {@dfltgid}, {@access_client}, {@dfltgid}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x4, 0x37, 0x66, 0x37, 0x33, 0x32], 0x2d, [0x64, 0x65, 0x34, 0x31], 0x2d, [0x37, 0x38, 0x52, 0x38], 0x2d, [0x63, 0x31, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x33, 0x64, 0x0, 0x62, 0x32, 0x61]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '@!{'}}]}})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})

[  891.670924] tmpfs: Bad value for 'size'
[  891.802216] 9pnet_virtio: no channels available for device syz
[  891.819481] 9pnet_virtio: no channels available for device syz
2024/09/23 07:37:44 Manager.Poll call failed: read tcp 127.0.0.1:49986->127.0.0.1:39901: i/o timeout

VM DIAGNOSIS:
07:42:40  Registers:
info registers vcpu 0
RAX=ffffffff83e774b0 RBX=0000000000000000 RCX=ffffffff83e5f08c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e77ab8 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38
R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001
R12=0000000000000000 R13=ffffffff85675ec8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e774be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f931c2d0010 CR3=0000000009366000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000001110065636976726573
XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=ffffffffffffffffffffffffffffffff
XMM06=ffffffffffffffffffffffffffffffff XMM07=00000000000000000000000000000000
XMM08=732f6563696c732e6d65747379732f3a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83e774b0 RBX=0000000000000001 RCX=ffffffff83e5f08c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e77ab8 RBP=ffffed1001130000 RSP=ffff88800898fe70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff85675ec8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e774be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe1800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005576d01d7a5c CR3=000000000b974000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffff000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000
XMM10=20000000200000002000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000