ring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x10cd}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:58:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 38) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:58:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffdef}], 0x1) [ 2536.179608] FAULT_INJECTION: forcing a failure. [ 2536.179608] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.182140] CPU: 1 PID: 11567 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2536.183593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.185343] Call Trace: [ 2536.185903] dump_stack+0x107/0x167 [ 2536.186669] should_fail.cold+0x5/0xa [ 2536.187470] ? create_object.isra.0+0x3a/0xa30 [ 2536.188432] should_failslab+0x5/0x20 [ 2536.189455] kmem_cache_alloc+0x5b/0x310 [ 2536.190319] create_object.isra.0+0x3a/0xa30 [ 2536.191246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.192319] kmem_cache_alloc+0x159/0x310 [ 2536.193220] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2536.194178] ? lock_chain_count+0x20/0x20 [ 2536.195051] ? __is_insn_slot_addr+0x123/0x290 [ 2536.195992] ? lock_downgrade+0x6d0/0x6d0 [ 2536.196878] ? mark_lock+0xf5/0x2df0 [ 2536.197661] ? ext4_discard_preallocations+0xd80/0xd80 [ 2536.198769] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.199890] ? lock_chain_count+0x20/0x20 [ 2536.200764] ? lock_chain_count+0x20/0x20 [ 2536.201651] ? __is_insn_slot_addr+0x14c/0x290 [ 2536.202621] ext4_new_meta_blocks+0x1e1/0x320 [ 2536.203569] ? ext4_should_retry_alloc+0x240/0x240 [ 2536.204604] ? lock_chain_count+0x20/0x20 [ 2536.205474] ? ext4_get_branch+0x541/0x6d0 [ 2536.206384] ext4_ind_map_blocks+0x950/0x2170 [ 2536.207336] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2536.208446] ? ext4_free_branches+0x680/0x680 [ 2536.209410] ? lock_release+0x680/0x680 [ 2536.210252] ? lock_downgrade+0x6d0/0x6d0 [ 2536.211134] ? down_write+0xe0/0x160 [ 2536.211914] ? down_write_killable+0x180/0x180 [ 2536.212895] ext4_map_blocks+0x902/0x1910 [ 2536.213782] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2536.214689] ? trace_hardirqs_on+0x5b/0x180 [ 2536.215598] ? kmem_cache_alloc+0x2a6/0x310 [ 2536.216493] ext4_writepages+0x19bf/0x3350 [ 2536.217405] ? ext4_da_write_end+0x21e/0x9c0 [ 2536.218309] ? generic_perform_write+0x2bf/0x4f0 [ 2536.219304] ? vfs_writev+0x1ae/0x620 [ 2536.220103] ? lock_acquire+0x197/0x470 [ 2536.220946] ? find_held_lock+0x2c/0x110 [ 2536.221782] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2536.222785] ? mark_held_locks+0x9e/0xe0 [ 2536.223632] ? kmem_cache_free+0xa7/0x2d0 [ 2536.224492] ? __kasan_slab_free+0x122/0x160 [ 2536.225412] ? slab_free_freelist_hook+0xa9/0x180 [ 2536.226406] ? jbd2_journal_stop+0x61f/0xdc0 [ 2536.227313] ? kmem_cache_free+0x249/0x2d0 [ 2536.228197] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2536.229200] do_writepages+0xee/0x2a0 [ 2536.230006] ? page_writeback_cpu_online+0x20/0x20 [ 2536.231006] ? __mark_inode_dirty+0x12e/0xd30 [ 2536.231943] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2536.233128] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2536.234183] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2536.235296] ? generic_perform_write+0x37d/0x4f0 [ 2536.236268] file_write_and_wait_range+0xb6/0x130 [ 2536.237264] ext4_sync_file+0x225/0xde0 [ 2536.238078] ? ext4_getfsmap+0x990/0x990 [ 2536.238922] vfs_fsync_range+0x13d/0x230 [ 2536.239759] ext4_buffered_write_iter+0x34b/0x4a0 [ 2536.240761] ext4_file_write_iter+0xccd/0x1530 [ 2536.241712] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2536.242672] do_iter_readv_writev+0x476/0x750 [ 2536.243581] ? _cond_resched+0x10/0x30 [ 2536.244375] ? new_sync_write+0x660/0x660 [ 2536.245233] ? avc_policy_seqno+0x9/0x70 [ 2536.246087] ? selinux_file_permission+0x92/0x520 [ 2536.247083] ? security_file_permission+0xb1/0xe0 [ 2536.248074] do_iter_write+0x191/0x700 [ 2536.248893] vfs_writev+0x1ae/0x620 [ 2536.249647] ? vfs_iter_write+0xa0/0xa0 [ 2536.250471] ? __fdget_pos+0xf1/0x190 [ 2536.251244] ? lock_downgrade+0x6d0/0x6d0 [ 2536.252103] ? ksys_write+0x12d/0x260 [ 2536.252904] ? __fget_files+0x2f8/0x520 [ 2536.253735] do_writev+0x139/0x300 [ 2536.254458] ? vfs_writev+0x620/0x620 [ 2536.255264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.256340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.257440] do_syscall_64+0x33/0x40 [ 2536.258206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.259280] RIP: 0033:0x7f55f59a1b19 [ 2536.260039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.263907] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2536.265478] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2536.266951] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2536.268418] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.269899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.271364] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:58:30 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0046686, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:58:30 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0xf0ffffff}, 0x0) [ 2536.395517] FAULT_INJECTION: forcing a failure. [ 2536.395517] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.398088] CPU: 1 PID: 11561 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2536.399495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.401211] Call Trace: [ 2536.401761] dump_stack+0x107/0x167 [ 2536.402523] should_fail.cold+0x5/0xa [ 2536.403306] ? kobject_uevent_env+0x22b/0xfd0 [ 2536.404230] ? dev_uevent_filter+0xd0/0xd0 [ 2536.405112] should_failslab+0x5/0x20 [ 2536.405900] kmem_cache_alloc_trace+0x55/0x320 [ 2536.406847] ? dev_uevent_filter+0xd0/0xd0 [ 2536.407710] kobject_uevent_env+0x22b/0xfd0 [ 2536.408610] ? software_node_notify+0xf8/0x2f0 [ 2536.409553] device_del+0xa8f/0x1180 [ 2536.410352] ? uevent_show+0x390/0x390 [ 2536.411168] unregister_netdevice_many+0xbb7/0x1490 [ 2536.412197] ? netdev_pick_tx+0xc70/0xc70 [ 2536.413076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.414150] ? queue_delayed_work_on+0xb4/0xe0 [ 2536.415077] ? trace_hardirqs_on+0x5b/0x180 [ 2536.415970] unregister_netdevice_queue+0x201/0x2c0 [ 2536.417000] ? unregister_netdevice_many+0x1490/0x1490 [ 2536.418085] ? linkwatch_fire_event+0x63/0x190 [ 2536.419027] __tun_detach+0xfc1/0x12b0 [ 2536.419836] tun_chr_close+0xc4/0x250 [ 2536.420609] __fput+0x285/0x9f0 [ 2536.421288] ? __tun_detach+0x12b0/0x12b0 [ 2536.422143] task_work_run+0xe2/0x1a0 [ 2536.422930] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2536.423933] syscall_exit_to_user_mode+0x38/0x1d0 [ 2536.424939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.426005] RIP: 0033:0x7f76b1fa0b19 [ 2536.426758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.430491] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2536.432041] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2536.433503] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2536.434950] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.436408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.437871] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:58:30 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x10ce}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:58:30 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xfeffffff, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:58:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 39) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:58:31 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) [ 2536.513403] FAULT_INJECTION: forcing a failure. [ 2536.513403] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.515862] CPU: 1 PID: 11583 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2536.517331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.519083] Call Trace: [ 2536.519645] dump_stack+0x107/0x167 [ 2536.520419] should_fail.cold+0x5/0xa [ 2536.521235] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2536.522197] should_failslab+0x5/0x20 [ 2536.523002] kmem_cache_alloc+0x5b/0x310 [ 2536.523867] ext4_mb_new_blocks+0x698/0x45c0 [ 2536.524790] ? ext4_expand_extra_isize+0x5a0/0x5a0 [ 2536.525855] ? jbd2__journal_start+0xf3/0x7e0 [ 2536.526814] ? ext4_discard_preallocations+0xd80/0xd80 [ 2536.527927] ? ext4_dirty_inode+0x107/0x130 [ 2536.528850] ? __mark_inode_dirty+0x12e/0xd30 [ 2536.529816] ext4_new_meta_blocks+0x1e1/0x320 [ 2536.530775] ? ext4_should_retry_alloc+0x240/0x240 [ 2536.531832] ? lock_chain_count+0x20/0x20 [ 2536.532711] ? ext4_get_branch+0x541/0x6d0 [ 2536.533643] ext4_ind_map_blocks+0x950/0x2170 [ 2536.534605] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2536.535724] ? ext4_free_branches+0x680/0x680 [ 2536.536687] ? lock_release+0x680/0x680 [ 2536.537552] ? lock_downgrade+0x6d0/0x6d0 [ 2536.538441] ? down_write+0xe0/0x160 [ 2536.539229] ? down_write_killable+0x180/0x180 [ 2536.540219] ext4_map_blocks+0x902/0x1910 [ 2536.541122] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2536.542071] ? trace_hardirqs_on+0x5b/0x180 [ 2536.542985] ? kmem_cache_alloc+0x2a6/0x310 [ 2536.543906] ext4_writepages+0x19bf/0x3350 [ 2536.544816] ? ext4_da_write_end+0x21e/0x9c0 [ 2536.545753] ? generic_perform_write+0x2bf/0x4f0 [ 2536.546757] ? vfs_writev+0x1ae/0x620 [ 2536.547577] ? lock_acquire+0x197/0x470 [ 2536.548416] ? find_held_lock+0x2c/0x110 [ 2536.549277] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2536.550325] ? mark_held_locks+0x9e/0xe0 [ 2536.551191] ? kmem_cache_free+0xa7/0x2d0 [ 2536.552064] ? __kasan_slab_free+0x122/0x160 [ 2536.553004] ? slab_free_freelist_hook+0xa9/0x180 [ 2536.554026] ? jbd2_journal_stop+0x61f/0xdc0 [ 2536.554953] ? kmem_cache_free+0x249/0x2d0 [ 2536.555867] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2536.556904] do_writepages+0xee/0x2a0 [ 2536.557717] ? page_writeback_cpu_online+0x20/0x20 [ 2536.558762] ? __mark_inode_dirty+0x12e/0xd30 [ 2536.559723] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 21:58:31 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0096616, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2536.560950] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2536.562258] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2536.563407] ? generic_perform_write+0x37d/0x4f0 [ 2536.564414] file_write_and_wait_range+0xb6/0x130 [ 2536.565417] ext4_sync_file+0x225/0xde0 [ 2536.566232] ? ext4_getfsmap+0x990/0x990 [ 2536.567074] vfs_fsync_range+0x13d/0x230 [ 2536.567911] ext4_buffered_write_iter+0x34b/0x4a0 [ 2536.568919] ext4_file_write_iter+0xccd/0x1530 [ 2536.569869] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2536.570832] do_iter_readv_writev+0x476/0x750 [ 2536.571752] ? _cond_resched+0x10/0x30 [ 2536.572554] ? new_sync_write+0x660/0x660 [ 2536.573425] ? avc_policy_seqno+0x9/0x70 [ 2536.574255] ? selinux_file_permission+0x92/0x520 [ 2536.575248] ? security_file_permission+0xb1/0xe0 [ 2536.576252] do_iter_write+0x191/0x700 [ 2536.577079] vfs_writev+0x1ae/0x620 [ 2536.577824] ? vfs_iter_write+0xa0/0xa0 [ 2536.578631] ? __fdget_pos+0xf1/0x190 [ 2536.579415] ? lock_downgrade+0x6d0/0x6d0 [ 2536.580281] ? ksys_write+0x12d/0x260 [ 2536.581072] ? __fget_files+0x2f8/0x520 [ 2536.581908] do_writev+0x139/0x300 [ 2536.582652] ? vfs_writev+0x620/0x620 [ 2536.583437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.584507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.585609] do_syscall_64+0x33/0x40 [ 2536.586378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.587423] RIP: 0033:0x7f55f59a1b19 [ 2536.588185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.591942] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2536.593499] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2536.594974] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2536.596433] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.597885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.599337] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:58:31 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0xfffffff0}, 0x0) 21:58:31 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 30) 21:58:31 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x20000000000000}, 0x0) [ 2536.847633] FAULT_INJECTION: forcing a failure. [ 2536.847633] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.850513] CPU: 0 PID: 11604 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2536.852074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.853963] Call Trace: [ 2536.854567] dump_stack+0x107/0x167 [ 2536.855399] should_fail.cold+0x5/0xa [ 2536.856280] ? create_object.isra.0+0x3a/0xa30 [ 2536.857325] should_failslab+0x5/0x20 [ 2536.858202] kmem_cache_alloc+0x5b/0x310 [ 2536.859132] create_object.isra.0+0x3a/0xa30 [ 2536.860124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.861295] kmem_cache_alloc_trace+0x151/0x320 [ 2536.862354] ? dev_uevent_filter+0xd0/0xd0 [ 2536.863311] kobject_uevent_env+0x22b/0xfd0 [ 2536.864303] ? software_node_notify+0xf8/0x2f0 [ 2536.865349] device_del+0xa8f/0x1180 [ 2536.866198] ? uevent_show+0x390/0x390 [ 2536.867097] unregister_netdevice_many+0xbb7/0x1490 [ 2536.868228] ? netdev_pick_tx+0xc70/0xc70 [ 2536.869185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.870370] ? queue_delayed_work_on+0xb4/0xe0 [ 2536.871400] ? trace_hardirqs_on+0x5b/0x180 [ 2536.872381] unregister_netdevice_queue+0x201/0x2c0 [ 2536.873524] ? unregister_netdevice_many+0x1490/0x1490 [ 2536.874720] ? linkwatch_fire_event+0x63/0x190 [ 2536.875763] __tun_detach+0xfc1/0x12b0 [ 2536.876655] tun_chr_close+0xc4/0x250 [ 2536.877526] __fput+0x285/0x9f0 [ 2536.878277] ? __tun_detach+0x12b0/0x12b0 [ 2536.879231] task_work_run+0xe2/0x1a0 [ 2536.880103] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2536.881222] syscall_exit_to_user_mode+0x38/0x1d0 [ 2536.882321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.883481] RIP: 0033:0x7f76b1fa0b19 [ 2536.884325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.888486] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2536.890210] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2536.891821] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2536.893440] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.895052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.896672] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:58:45 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1100}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:58:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffff5}], 0x1) 21:58:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 31) 21:58:45 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xff0f0000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:58:45 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0185879, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:58:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:58:45 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:58:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x100000000000000}, 0x0) [ 2550.739473] FAULT_INJECTION: forcing a failure. [ 2550.739473] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.742368] CPU: 0 PID: 11632 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2550.743942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.745926] Call Trace: [ 2550.746529] dump_stack+0x107/0x167 [ 2550.747360] should_fail.cold+0x5/0xa [ 2550.748238] ? create_object.isra.0+0x3a/0xa30 [ 2550.749280] should_failslab+0x5/0x20 [ 2550.750139] kmem_cache_alloc+0x5b/0x310 [ 2550.751066] create_object.isra.0+0x3a/0xa30 [ 2550.752063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2550.753229] kmem_cache_alloc+0x159/0x310 21:58:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x2000000000000000}, 0x0) [ 2550.754176] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2550.755408] ? mark_lock+0xf5/0x2df0 [ 2550.756253] ? lock_downgrade+0x6d0/0x6d0 [ 2550.757219] ? mark_lock+0xf5/0x2df0 [ 2550.758073] ? ext4_discard_preallocations+0xd80/0xd80 [ 2550.759275] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.760501] ? lock_chain_count+0x20/0x20 [ 2550.761457] ? lock_chain_count+0x20/0x20 [ 2550.762408] ? __is_insn_slot_addr+0x14c/0x290 [ 2550.763465] ext4_new_meta_blocks+0x1e1/0x320 [ 2550.764487] ? ext4_should_retry_alloc+0x240/0x240 [ 2550.765616] ? ext4_get_branch+0x541/0x6d0 [ 2550.766603] ext4_ind_map_blocks+0x950/0x2170 [ 2550.767634] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.768846] ? ext4_free_branches+0x680/0x680 [ 2550.769892] ? lock_release+0x680/0x680 [ 2550.770805] ? lock_downgrade+0x6d0/0x6d0 [ 2550.771747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.772948] ? down_write+0xe0/0x160 [ 2550.773798] ? down_write_killable+0x180/0x180 [ 2550.774853] ext4_map_blocks+0x902/0x1910 [ 2550.775810] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2550.776828] ? trace_hardirqs_on+0x5b/0x180 [ 2550.777827] ? kmem_cache_alloc+0x2a6/0x310 [ 2550.778816] ext4_writepages+0x19bf/0x3350 [ 2550.779794] ? ext4_da_write_end+0x21e/0x9c0 [ 2550.780790] ? generic_perform_write+0x2bf/0x4f0 [ 2550.781872] ? vfs_writev+0x1ae/0x620 [ 2550.782759] ? lock_acquire+0x197/0x470 [ 2550.783659] ? find_held_lock+0x2c/0x110 [ 2550.784584] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2550.785721] ? mark_held_locks+0x9e/0xe0 [ 2550.786657] ? kmem_cache_free+0xa7/0x2d0 [ 2550.787598] ? __kasan_slab_free+0x122/0x160 [ 2550.788602] ? slab_free_freelist_hook+0xa9/0x180 [ 2550.789706] ? jbd2_journal_stop+0x61f/0xdc0 [ 2550.790701] ? kmem_cache_free+0x249/0x2d0 [ 2550.791677] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2550.792785] do_writepages+0xee/0x2a0 [ 2550.793659] ? page_writeback_cpu_online+0x20/0x20 [ 2550.794777] ? __mark_inode_dirty+0x12e/0xd30 [ 2550.795810] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2550.797131] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2550.798264] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2550.799491] ? generic_perform_write+0x37d/0x4f0 [ 2550.800578] file_write_and_wait_range+0xb6/0x130 [ 2550.801689] ext4_sync_file+0x225/0xde0 [ 2550.802602] ? ext4_getfsmap+0x990/0x990 [ 2550.803536] vfs_fsync_range+0x13d/0x230 [ 2550.804464] ext4_buffered_write_iter+0x34b/0x4a0 [ 2550.805569] ext4_file_write_iter+0xccd/0x1530 [ 2550.806628] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2550.807685] do_iter_readv_writev+0x476/0x750 [ 2550.808700] ? _cond_resched+0x10/0x30 [ 2550.809596] ? new_sync_write+0x660/0x660 [ 2550.810540] ? avc_policy_seqno+0x9/0x70 [ 2550.811460] ? selinux_file_permission+0x92/0x520 [ 2550.812560] ? security_file_permission+0xb1/0xe0 [ 2550.813673] do_iter_write+0x191/0x700 [ 2550.814577] vfs_writev+0x1ae/0x620 [ 2550.815404] ? vfs_iter_write+0xa0/0xa0 [ 2550.816310] ? __fdget_pos+0xf1/0x190 [ 2550.817185] ? lock_downgrade+0x6d0/0x6d0 [ 2550.818127] ? ksys_write+0x12d/0x260 [ 2550.819007] ? __fget_files+0x2f8/0x520 [ 2550.819935] do_writev+0x139/0x300 [ 2550.820750] ? vfs_writev+0x620/0x620 [ 2550.821626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.822810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.823996] do_syscall_64+0x33/0x40 [ 2550.824844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.826029] RIP: 0033:0x7f55f59a1b19 [ 2550.826874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.831071] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2550.832797] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2550.834420] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2550.836034] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.837667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.839286] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 [ 2550.899433] FAULT_INJECTION: forcing a failure. [ 2550.899433] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.903122] CPU: 0 PID: 11624 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2550.904703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.906595] Call Trace: [ 2550.907197] dump_stack+0x107/0x167 [ 2550.908029] should_fail.cold+0x5/0xa [ 2550.908898] ? kobject_get_path+0xc5/0x1f0 [ 2550.909866] should_failslab+0x5/0x20 [ 2550.910727] __kmalloc+0x72/0x390 [ 2550.911516] ? trace_hardirqs_on+0x5b/0x180 [ 2550.912504] kobject_get_path+0xc5/0x1f0 [ 2550.913440] kobject_uevent_env+0x251/0xfd0 [ 2550.914430] ? software_node_notify+0xf8/0x2f0 [ 2550.915471] device_del+0xa8f/0x1180 [ 2550.916325] ? uevent_show+0x390/0x390 [ 2550.917233] unregister_netdevice_many+0xbb7/0x1490 [ 2550.918377] ? netdev_pick_tx+0xc70/0xc70 [ 2550.919322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.920515] ? queue_delayed_work_on+0xb4/0xe0 [ 2550.921553] ? trace_hardirqs_on+0x5b/0x180 [ 2550.922539] unregister_netdevice_queue+0x201/0x2c0 [ 2550.923676] ? unregister_netdevice_many+0x1490/0x1490 [ 2550.924881] ? linkwatch_fire_event+0x63/0x190 [ 2550.925929] __tun_detach+0xfc1/0x12b0 [ 2550.926823] tun_chr_close+0xc4/0x250 [ 2550.927690] __fput+0x285/0x9f0 [ 2550.928435] ? __tun_detach+0x12b0/0x12b0 [ 2550.929386] task_work_run+0xe2/0x1a0 [ 2550.930252] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2550.931367] syscall_exit_to_user_mode+0x38/0x1d0 [ 2550.932465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.933641] RIP: 0033:0x7f76b1fa0b19 [ 2550.934495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.938670] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2550.940409] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2550.942040] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2550.943673] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.945301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.946923] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:07 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x3000000000000000}, 0x0) 21:59:07 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xff6f0000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:59:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x400ff40bffc}], 0x1) 21:59:07 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:07 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 41) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:07 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 32) 21:59:07 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1f00}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) [ 2572.560378] FAULT_INJECTION: forcing a failure. [ 2572.560378] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.562275] CPU: 0 PID: 11653 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2572.563388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.564611] Call Trace: [ 2572.565014] dump_stack+0x107/0x167 [ 2572.565570] should_fail.cold+0x5/0xa [ 2572.566134] ? create_object.isra.0+0x3a/0xa30 [ 2572.566806] should_failslab+0x5/0x20 [ 2572.567365] kmem_cache_alloc+0x5b/0x310 [ 2572.567967] ? kmem_cache_alloc_trace+0x151/0x320 [ 2572.568683] create_object.isra.0+0x3a/0xa30 [ 2572.569340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2572.570096] __kmalloc+0x16e/0x390 [ 2572.570627] kobject_get_path+0xc5/0x1f0 [ 2572.571229] kobject_uevent_env+0x251/0xfd0 [ 2572.571871] ? software_node_notify+0xf8/0x2f0 [ 2572.572552] device_del+0xa8f/0x1180 [ 2572.573109] ? uevent_show+0x390/0x390 [ 2572.573710] unregister_netdevice_many+0xbb7/0x1490 [ 2572.574463] ? netdev_pick_tx+0xc70/0xc70 [ 2572.575091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2572.575884] ? queue_delayed_work_on+0xb4/0xe0 [ 2572.576560] ? trace_hardirqs_on+0x5b/0x180 [ 2572.577214] unregister_netdevice_queue+0x201/0x2c0 [ 2572.577962] ? unregister_netdevice_many+0x1490/0x1490 [ 2572.578755] ? linkwatch_fire_event+0x63/0x190 [ 2572.579438] __tun_detach+0xfc1/0x12b0 [ 2572.580039] tun_chr_close+0xc4/0x250 [ 2572.580598] __fput+0x285/0x9f0 [ 2572.581093] ? __tun_detach+0x12b0/0x12b0 [ 2572.581727] task_work_run+0xe2/0x1a0 [ 2572.582289] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2572.583004] syscall_exit_to_user_mode+0x38/0x1d0 [ 2572.583708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2572.584457] RIP: 0033:0x7f76b1fa0b19 [ 2572.585001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.587710] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2572.588833] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2572.589883] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2572.590918] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2572.591972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2572.593024] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:07 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x4000000000000000}, 0x0) [ 2572.629078] FAULT_INJECTION: forcing a failure. [ 2572.629078] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.631771] CPU: 1 PID: 11666 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2572.633299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.635109] Call Trace: [ 2572.635686] dump_stack+0x107/0x167 [ 2572.636478] should_fail.cold+0x5/0xa [ 2572.637315] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2572.638306] should_failslab+0x5/0x20 [ 2572.639132] kmem_cache_alloc+0x5b/0x310 [ 2572.640019] ext4_mb_new_blocks+0x698/0x45c0 [ 2572.640970] ? ext4_expand_extra_isize+0x5a0/0x5a0 [ 2572.642052] ? jbd2__journal_start+0xf3/0x7e0 [ 2572.643037] ? ext4_discard_preallocations+0xd80/0xd80 [ 2572.644173] ? ext4_dirty_inode+0x107/0x130 [ 2572.645114] ? __mark_inode_dirty+0x12e/0xd30 [ 2572.646105] ext4_new_meta_blocks+0x1e1/0x320 [ 2572.647090] ? ext4_should_retry_alloc+0x240/0x240 [ 2572.648164] ? lock_chain_count+0x20/0x20 [ 2572.649070] ? ext4_get_branch+0x541/0x6d0 [ 2572.650013] ext4_ind_map_blocks+0x950/0x2170 [ 2572.651000] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2572.652145] ? ext4_free_branches+0x680/0x680 [ 2572.653132] ? lock_release+0x680/0x680 [ 2572.654014] ? lock_downgrade+0x6d0/0x6d0 [ 2572.654935] ? down_write+0xe0/0x160 [ 2572.655741] ? down_write_killable+0x180/0x180 [ 2572.656749] ext4_map_blocks+0x902/0x1910 [ 2572.657685] ? ext4_issue_zeroout+0x1c0/0x1c0 21:59:07 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc020660b, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2572.658660] ? trace_hardirqs_on+0x5b/0x180 [ 2572.659798] ? kmem_cache_alloc+0x2a6/0x310 [ 2572.660737] ext4_writepages+0x19bf/0x3350 [ 2572.661674] ? ext4_da_write_end+0x21e/0x9c0 [ 2572.662617] ? generic_perform_write+0x2bf/0x4f0 [ 2572.663644] ? vfs_writev+0x1ae/0x620 [ 2572.664484] ? lock_acquire+0x197/0x470 [ 2572.665342] ? find_held_lock+0x2c/0x110 [ 2572.666218] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2572.667282] ? mark_held_locks+0x9e/0xe0 [ 2572.668169] ? kmem_cache_free+0xa7/0x2d0 [ 2572.669059] ? __kasan_slab_free+0x122/0x160 [ 2572.670031] ? slab_free_freelist_hook+0xa9/0x180 [ 2572.671355] ? jbd2_journal_stop+0x61f/0xdc0 [ 2572.672611] ? kmem_cache_free+0x249/0x2d0 [ 2572.673845] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2572.675208] do_writepages+0xee/0x2a0 [ 2572.676303] ? page_writeback_cpu_online+0x20/0x20 [ 2572.677709] ? __mark_inode_dirty+0x12e/0xd30 [ 2572.678799] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2572.680064] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2572.681158] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2572.682583] ? generic_perform_write+0x37d/0x4f0 [ 2572.683729] file_write_and_wait_range+0xb6/0x130 [ 2572.684758] ext4_sync_file+0x225/0xde0 [ 2572.685649] ? ext4_getfsmap+0x990/0x990 [ 2572.686520] vfs_fsync_range+0x13d/0x230 [ 2572.687389] ext4_buffered_write_iter+0x34b/0x4a0 [ 2572.688417] ext4_file_write_iter+0xccd/0x1530 [ 2572.689412] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2572.690407] do_iter_readv_writev+0x476/0x750 21:59:07 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x6000000000000000}, 0x0) [ 2572.691359] ? _cond_resched+0x10/0x30 [ 2572.692334] ? new_sync_write+0x660/0x660 [ 2572.693225] ? avc_policy_seqno+0x9/0x70 [ 2572.694101] ? selinux_file_permission+0x92/0x520 [ 2572.695129] ? security_file_permission+0xb1/0xe0 [ 2572.696165] do_iter_write+0x191/0x700 [ 2572.697009] vfs_writev+0x1ae/0x620 [ 2572.697802] ? vfs_iter_write+0xa0/0xa0 [ 2572.698653] ? __fdget_pos+0xf1/0x190 [ 2572.699469] ? lock_downgrade+0x6d0/0x6d0 [ 2572.700349] ? ksys_write+0x12d/0x260 [ 2572.701164] ? __fget_files+0x2f8/0x520 [ 2572.702040] do_writev+0x139/0x300 [ 2572.702796] ? vfs_writev+0x620/0x620 [ 2572.703608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2572.704711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2572.705810] do_syscall_64+0x33/0x40 [ 2572.706594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2572.707675] RIP: 0033:0x7f55f59a1b19 [ 2572.708457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.712336] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2572.713943] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2572.715449] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2572.716952] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2572.718461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2572.719961] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:59:07 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 33) 21:59:07 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x7e00000000000000}, 0x0) 21:59:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 42) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:07 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc020662a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:07 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4000}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:07 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xfffffffb, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2572.881521] FAULT_INJECTION: forcing a failure. [ 2572.881521] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.884211] CPU: 1 PID: 11686 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2572.885695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.887447] Call Trace: [ 2572.888003] dump_stack+0x107/0x167 [ 2572.888776] should_fail.cold+0x5/0xa [ 2572.889587] ? __alloc_skb+0x6d/0x5b0 [ 2572.890384] should_failslab+0x5/0x20 [ 2572.891185] kmem_cache_alloc_node+0x55/0x330 [ 2572.892139] __alloc_skb+0x6d/0x5b0 [ 2572.892910] alloc_uevent_skb+0x7b/0x210 [ 2572.893775] kobject_uevent_env+0xce1/0xfd0 [ 2572.894690] ? software_node_notify+0xf8/0x2f0 [ 2572.895656] device_del+0xa8f/0x1180 [ 2572.896449] ? uevent_show+0x390/0x390 [ 2572.897283] unregister_netdevice_many+0xbb7/0x1490 [ 2572.898340] ? netdev_pick_tx+0xc70/0xc70 [ 2572.899220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2572.900324] ? queue_delayed_work_on+0xb4/0xe0 [ 2572.901290] ? trace_hardirqs_on+0x5b/0x180 [ 2572.902201] unregister_netdevice_queue+0x201/0x2c0 [ 2572.903255] ? unregister_netdevice_many+0x1490/0x1490 [ 2572.904359] ? linkwatch_fire_event+0x63/0x190 [ 2572.905329] __tun_detach+0xfc1/0x12b0 [ 2572.906156] tun_chr_close+0xc4/0x250 [ 2572.906962] __fput+0x285/0x9f0 [ 2572.907650] ? __tun_detach+0x12b0/0x12b0 [ 2572.908523] task_work_run+0xe2/0x1a0 [ 2572.909364] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2572.910399] syscall_exit_to_user_mode+0x38/0x1d0 [ 2572.911416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2572.912490] RIP: 0033:0x7f76b1fa0b19 [ 2572.913275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.917165] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2572.918775] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2572.920269] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2572.921776] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2572.923281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2572.924781] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:07 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) [ 2573.004997] FAULT_INJECTION: forcing a failure. [ 2573.004997] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.007419] CPU: 1 PID: 11701 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2573.008881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2573.010639] Call Trace: [ 2573.011209] dump_stack+0x107/0x167 [ 2573.011981] should_fail.cold+0x5/0xa [ 2573.012787] ? create_object.isra.0+0x3a/0xa30 [ 2573.013766] should_failslab+0x5/0x20 [ 2573.014566] kmem_cache_alloc+0x5b/0x310 [ 2573.015421] ? ext4_mark_iloc_dirty+0x1c24/0x3630 [ 2573.016443] create_object.isra.0+0x3a/0xa30 [ 2573.017374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2573.018455] kmem_cache_alloc+0x159/0x310 [ 2573.019330] ext4_mb_new_blocks+0x698/0x45c0 [ 2573.020251] ? ext4_expand_extra_isize+0x5a0/0x5a0 [ 2573.021305] ? jbd2__journal_start+0xf3/0x7e0 [ 2573.022268] ? ext4_discard_preallocations+0xd80/0xd80 [ 2573.023377] ? ext4_dirty_inode+0x107/0x130 [ 2573.024291] ? __mark_inode_dirty+0x12e/0xd30 [ 2573.025244] ext4_new_meta_blocks+0x1e1/0x320 [ 2573.026195] ? ext4_should_retry_alloc+0x240/0x240 [ 2573.027236] ? lock_chain_count+0x20/0x20 [ 2573.028106] ? ext4_get_branch+0x541/0x6d0 [ 2573.029009] ext4_ind_map_blocks+0x950/0x2170 [ 2573.029987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2573.031102] ? ext4_free_branches+0x680/0x680 [ 2573.032061] ? lock_release+0x680/0x680 [ 2573.032905] ? lock_downgrade+0x6d0/0x6d0 [ 2573.033797] ? down_write+0xe0/0x160 [ 2573.034583] ? down_write_killable+0x180/0x180 [ 2573.035554] ext4_map_blocks+0x902/0x1910 [ 2573.036436] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2573.037409] ? trace_hardirqs_on+0x5b/0x180 [ 2573.038325] ? kmem_cache_alloc+0x2a6/0x310 [ 2573.039251] ext4_writepages+0x19bf/0x3350 [ 2573.040149] ? ext4_da_write_end+0x21e/0x9c0 [ 2573.041069] ? generic_perform_write+0x2bf/0x4f0 [ 2573.042075] ? vfs_writev+0x1ae/0x620 [ 2573.042895] ? lock_acquire+0x197/0x470 [ 2573.043726] ? find_held_lock+0x2c/0x110 [ 2573.044581] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2573.045633] ? mark_held_locks+0x9e/0xe0 [ 2573.046503] ? kmem_cache_free+0xa7/0x2d0 [ 2573.047373] ? __kasan_slab_free+0x122/0x160 [ 2573.048301] ? slab_free_freelist_hook+0xa9/0x180 [ 2573.049324] ? jbd2_journal_stop+0x61f/0xdc0 [ 2573.050245] ? kmem_cache_free+0x249/0x2d0 [ 2573.051148] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2573.052167] do_writepages+0xee/0x2a0 [ 2573.052970] ? page_writeback_cpu_online+0x20/0x20 [ 2573.054013] ? __mark_inode_dirty+0x12e/0xd30 [ 2573.054971] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2573.056183] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2573.057230] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2573.058379] ? generic_perform_write+0x37d/0x4f0 [ 2573.059376] file_write_and_wait_range+0xb6/0x130 [ 2573.060391] ext4_sync_file+0x225/0xde0 [ 2573.061233] ? ext4_getfsmap+0x990/0x990 [ 2573.062097] vfs_fsync_range+0x13d/0x230 [ 2573.062956] ext4_buffered_write_iter+0x34b/0x4a0 [ 2573.063979] ext4_file_write_iter+0xccd/0x1530 [ 2573.064960] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2573.065951] do_iter_readv_writev+0x476/0x750 [ 2573.066892] ? _cond_resched+0x10/0x30 [ 2573.067709] ? new_sync_write+0x660/0x660 [ 2573.068578] ? avc_policy_seqno+0x9/0x70 [ 2573.069436] ? selinux_file_permission+0x92/0x520 [ 2573.070454] ? security_file_permission+0xb1/0xe0 [ 2573.071473] do_iter_write+0x191/0x700 [ 2573.072309] vfs_writev+0x1ae/0x620 [ 2573.073077] ? vfs_iter_write+0xa0/0xa0 [ 2573.073919] ? __fdget_pos+0xf1/0x190 [ 2573.074723] ? lock_downgrade+0x6d0/0x6d0 [ 2573.075600] ? ksys_write+0x12d/0x260 [ 2573.076409] ? __fget_files+0x2f8/0x520 [ 2573.077275] do_writev+0x139/0x300 [ 2573.078024] ? vfs_writev+0x620/0x620 [ 2573.078834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2573.079930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2573.081025] do_syscall_64+0x33/0x40 [ 2573.081819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2573.082894] RIP: 0033:0x7f55f59a1b19 [ 2573.083681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2573.087579] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2573.089210] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2573.090747] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2573.092279] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.093819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.095352] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:59:19 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:19 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0xf0ffffff00000000}, 0x0) 21:59:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xffff88800dd77068}], 0x1) 21:59:19 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4100}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 43) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:19 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc028660f, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 34) 21:59:19 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xfffffffe, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2585.051231] FAULT_INJECTION: forcing a failure. [ 2585.051231] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.052592] CPU: 1 PID: 11714 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2585.053395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.054364] Call Trace: [ 2585.054680] dump_stack+0x107/0x167 [ 2585.055105] should_fail.cold+0x5/0xa [ 2585.055549] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2585.056079] should_failslab+0x5/0x20 [ 2585.056522] kmem_cache_alloc+0x5b/0x310 [ 2585.056997] ext4_mb_new_blocks+0x698/0x45c0 [ 2585.057512] ? jbd2_journal_dirty_metadata+0x5d9/0xa10 [ 2585.058128] ? __jbd2_journal_file_buffer+0x529/0x7e0 [ 2585.058729] ? do_raw_spin_unlock+0x4f/0x220 [ 2585.059242] ? _raw_spin_unlock+0x1a/0x30 [ 2585.059721] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 2585.060328] ? ext4_discard_preallocations+0xd80/0xd80 [ 2585.060940] ? __ext4_handle_dirty_metadata+0x1f3/0x720 [ 2585.061573] ext4_ind_map_blocks+0x17e4/0x2170 [ 2585.062117] ? ext4_free_branches+0x680/0x680 [ 2585.062645] ? lock_release+0x680/0x680 [ 2585.063107] ? lock_downgrade+0x6d0/0x6d0 [ 2585.063594] ? down_write_killable+0x180/0x180 [ 2585.064128] ext4_map_blocks+0x902/0x1910 [ 2585.064611] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2585.065125] ? trace_hardirqs_on+0x5b/0x180 [ 2585.065630] ? kmem_cache_alloc+0x2a6/0x310 [ 2585.066132] ext4_writepages+0x19bf/0x3350 [ 2585.066624] ? ext4_da_write_end+0x21e/0x9c0 [ 2585.067129] ? generic_perform_write+0x2bf/0x4f0 [ 2585.067675] ? vfs_writev+0x1ae/0x620 [ 2585.068124] ? lock_acquire+0x197/0x470 [ 2585.068580] ? find_held_lock+0x2c/0x110 [ 2585.069047] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2585.069624] ? mark_held_locks+0x9e/0xe0 [ 2585.070098] ? kmem_cache_free+0xa7/0x2d0 [ 2585.070578] ? __kasan_slab_free+0x122/0x160 [ 2585.071087] ? slab_free_freelist_hook+0xa9/0x180 [ 2585.071641] ? jbd2_journal_stop+0x61f/0xdc0 [ 2585.072145] ? kmem_cache_free+0x249/0x2d0 [ 2585.072641] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2585.073202] do_writepages+0xee/0x2a0 [ 2585.073649] ? page_writeback_cpu_online+0x20/0x20 [ 2585.074211] ? __mark_inode_dirty+0x12e/0xd30 [ 2585.074735] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2585.075399] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2585.075975] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2585.076597] ? generic_perform_write+0x37d/0x4f0 [ 2585.077146] file_write_and_wait_range+0xb6/0x130 [ 2585.077710] ext4_sync_file+0x225/0xde0 [ 2585.078169] ? ext4_getfsmap+0x990/0x990 [ 2585.078638] vfs_fsync_range+0x13d/0x230 [ 2585.079110] ext4_buffered_write_iter+0x34b/0x4a0 [ 2585.079669] ext4_file_write_iter+0xccd/0x1530 [ 2585.080206] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2585.080746] do_iter_readv_writev+0x476/0x750 [ 2585.081262] ? _cond_resched+0x10/0x30 [ 2585.081722] ? new_sync_write+0x660/0x660 [ 2585.082200] ? avc_policy_seqno+0x9/0x70 [ 2585.082669] ? selinux_file_permission+0x92/0x520 [ 2585.083227] ? security_file_permission+0xb1/0xe0 [ 2585.083791] do_iter_write+0x191/0x700 [ 2585.084245] vfs_writev+0x1ae/0x620 [ 2585.084662] ? vfs_iter_write+0xa0/0xa0 [ 2585.085118] ? __fdget_pos+0xf1/0x190 [ 2585.085561] ? lock_downgrade+0x6d0/0x6d0 [ 2585.086040] ? ksys_write+0x12d/0x260 [ 2585.086479] ? __fget_files+0x2f8/0x520 [ 2585.086945] do_writev+0x139/0x300 [ 2585.087352] ? vfs_writev+0x620/0x620 [ 2585.087791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.088390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.088982] do_syscall_64+0x33/0x40 [ 2585.089416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.090001] RIP: 0033:0x7f55f59a1b19 [ 2585.090427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.092517] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2585.093382] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2585.094202] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2585.095013] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.095824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.096638] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:59:19 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0xffffffff00000000}, 0x0) 21:59:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffffffffffdef}], 0x1) [ 2585.175124] FAULT_INJECTION: forcing a failure. [ 2585.175124] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.176519] CPU: 1 PID: 11717 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2585.177295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.178221] Call Trace: [ 2585.178522] dump_stack+0x107/0x167 [ 2585.178927] should_fail.cold+0x5/0xa [ 2585.179350] ? create_object.isra.0+0x3a/0xa30 [ 2585.179852] should_failslab+0x5/0x20 [ 2585.180271] kmem_cache_alloc+0x5b/0x310 [ 2585.180723] create_object.isra.0+0x3a/0xa30 [ 2585.181208] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2585.181781] kmem_cache_alloc_node+0x169/0x330 [ 2585.182288] __alloc_skb+0x6d/0x5b0 [ 2585.182694] alloc_uevent_skb+0x7b/0x210 [ 2585.183152] kobject_uevent_env+0xce1/0xfd0 [ 2585.183784] ? software_node_notify+0xf8/0x2f0 [ 2585.184294] device_del+0xa8f/0x1180 [ 2585.184709] ? uevent_show+0x390/0x390 [ 2585.185144] unregister_netdevice_many+0xbb7/0x1490 [ 2585.185703] ? netdev_pick_tx+0xc70/0xc70 [ 2585.186170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.186784] ? queue_delayed_work_on+0xb4/0xe0 [ 2585.187286] ? trace_hardirqs_on+0x5b/0x180 [ 2585.187765] unregister_netdevice_queue+0x201/0x2c0 [ 2585.188312] ? unregister_netdevice_many+0x1490/0x1490 [ 2585.188893] ? linkwatch_fire_event+0x63/0x190 [ 2585.189409] __tun_detach+0xfc1/0x12b0 [ 2585.189845] tun_chr_close+0xc4/0x250 [ 2585.190266] __fput+0x285/0x9f0 [ 2585.190628] ? __tun_detach+0x12b0/0x12b0 [ 2585.191089] task_work_run+0xe2/0x1a0 [ 2585.191519] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2585.192067] syscall_exit_to_user_mode+0x38/0x1d0 [ 2585.192596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.193160] RIP: 0033:0x7f76b1fa0b19 [ 2585.193607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.195624] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2585.196458] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2585.197235] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2585.198022] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.198800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.199580] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 44) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:19 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 21:59:19 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0406618, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x2) 21:59:19 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x8100}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:19 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x30}, 0x0) [ 2585.338217] FAULT_INJECTION: forcing a failure. [ 2585.338217] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.340972] CPU: 0 PID: 11748 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2585.342533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.344389] Call Trace: [ 2585.344992] dump_stack+0x107/0x167 [ 2585.345825] should_fail.cold+0x5/0xa [ 2585.346686] ? create_object.isra.0+0x3a/0xa30 [ 2585.347715] should_failslab+0x5/0x20 [ 2585.348575] kmem_cache_alloc+0x5b/0x310 [ 2585.349506] create_object.isra.0+0x3a/0xa30 [ 2585.350491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2585.351642] kmem_cache_alloc+0x159/0x310 [ 2585.352596] jbd2_journal_add_journal_head+0x1a3/0x540 [ 2585.353794] jbd2_journal_get_create_access+0x40/0x570 [ 2585.354983] __ext4_journal_get_create_access+0x43/0x90 [ 2585.356198] ext4_ind_map_blocks+0xbb0/0x2170 [ 2585.357230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2585.358441] ? ext4_free_branches+0x680/0x680 [ 2585.359469] ? lock_release+0x680/0x680 [ 2585.360375] ? lock_downgrade+0x6d0/0x6d0 [ 2585.361335] ? down_write_killable+0x180/0x180 [ 2585.362393] ext4_map_blocks+0x902/0x1910 [ 2585.363343] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2585.364366] ? trace_hardirqs_on+0x5b/0x180 [ 2585.365346] ? kmem_cache_alloc+0x2a6/0x310 [ 2585.366357] ext4_writepages+0x19bf/0x3350 [ 2585.367326] ? ext4_da_write_end+0x21e/0x9c0 [ 2585.368307] ? generic_perform_write+0x2bf/0x4f0 [ 2585.369383] ? vfs_writev+0x1ae/0x620 [ 2585.370271] ? lock_acquire+0x197/0x470 [ 2585.371169] ? find_held_lock+0x2c/0x110 [ 2585.372086] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2585.373205] ? mark_held_locks+0x9e/0xe0 [ 2585.374148] ? kmem_cache_free+0xa7/0x2d0 [ 2585.375089] ? __kasan_slab_free+0x122/0x160 [ 2585.376086] ? slab_free_freelist_hook+0xa9/0x180 [ 2585.377177] ? jbd2_journal_stop+0x61f/0xdc0 [ 2585.378175] ? kmem_cache_free+0x249/0x2d0 [ 2585.379148] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2585.380248] do_writepages+0xee/0x2a0 [ 2585.381111] ? page_writeback_cpu_online+0x20/0x20 [ 2585.382224] ? __mark_inode_dirty+0x12e/0xd30 [ 2585.383260] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2585.384563] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2585.385699] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2585.386915] ? generic_perform_write+0x37d/0x4f0 [ 2585.387990] file_write_and_wait_range+0xb6/0x130 [ 2585.389082] ext4_sync_file+0x225/0xde0 [ 2585.389987] ? ext4_getfsmap+0x990/0x990 [ 2585.390913] vfs_fsync_range+0x13d/0x230 [ 2585.391835] ext4_buffered_write_iter+0x34b/0x4a0 [ 2585.392927] ext4_file_write_iter+0xccd/0x1530 [ 2585.393990] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2585.395046] do_iter_readv_writev+0x476/0x750 [ 2585.396054] ? _cond_resched+0x10/0x30 [ 2585.396935] ? new_sync_write+0x660/0x660 [ 2585.397877] ? avc_policy_seqno+0x9/0x70 [ 2585.398789] ? selinux_file_permission+0x92/0x520 [ 2585.399885] ? security_file_permission+0xb1/0xe0 [ 2585.400983] do_iter_write+0x191/0x700 [ 2585.401886] vfs_writev+0x1ae/0x620 [ 2585.402711] ? vfs_iter_write+0xa0/0xa0 [ 2585.403614] ? __fdget_pos+0xf1/0x190 [ 2585.404478] ? lock_downgrade+0x6d0/0x6d0 [ 2585.405436] ? ksys_write+0x12d/0x260 [ 2585.406302] ? __fget_files+0x2f8/0x520 [ 2585.407226] do_writev+0x139/0x300 [ 2585.408033] ? vfs_writev+0x620/0x620 [ 2585.408900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.410097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.411274] do_syscall_64+0x33/0x40 [ 2585.412116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.413279] RIP: 0033:0x7f55f59a1b19 [ 2585.414132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.418290] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2585.420017] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2585.421644] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2585.423271] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.424882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.426497] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:59:19 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:19 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x8000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:59:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 45) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:19 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x60}, 0x0) 21:59:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 35) 21:59:20 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0406619, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:20 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x7e}, 0x0) [ 2585.554431] FAULT_INJECTION: forcing a failure. [ 2585.554431] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.555665] CPU: 1 PID: 11773 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2585.556406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.557288] Call Trace: [ 2585.557583] dump_stack+0x107/0x167 [ 2585.557975] should_fail.cold+0x5/0xa [ 2585.558384] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2585.558871] should_failslab+0x5/0x20 [ 2585.559277] kmem_cache_alloc+0x5b/0x310 [ 2585.559715] ext4_mb_new_blocks+0x698/0x45c0 [ 2585.560184] ? jbd2_journal_dirty_metadata+0x5d9/0xa10 [ 2585.560752] ? __jbd2_journal_file_buffer+0x529/0x7e0 [ 2585.561302] ? do_raw_spin_unlock+0x4f/0x220 [ 2585.561786] ? _raw_spin_unlock+0x1a/0x30 [ 2585.562228] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 2585.562791] ? ext4_discard_preallocations+0xd80/0xd80 [ 2585.563355] ? __ext4_handle_dirty_metadata+0x1f3/0x720 [ 2585.563929] ext4_ind_map_blocks+0x17e4/0x2170 [ 2585.564430] ? ext4_free_branches+0x680/0x680 [ 2585.564922] ? lock_release+0x680/0x680 [ 2585.565352] ? lock_downgrade+0x6d0/0x6d0 [ 2585.565810] ? down_write_killable+0x180/0x180 [ 2585.566305] ext4_map_blocks+0x902/0x1910 [ 2585.566755] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2585.567234] ? trace_hardirqs_on+0x5b/0x180 [ 2585.567697] ? kmem_cache_alloc+0x2a6/0x310 [ 2585.568164] ext4_writepages+0x19bf/0x3350 [ 2585.568620] ? ext4_da_write_end+0x21e/0x9c0 [ 2585.569123] ? generic_perform_write+0x2bf/0x4f0 [ 2585.569638] ? vfs_writev+0x1ae/0x620 [ 2585.570053] ? lock_acquire+0x197/0x470 [ 2585.570481] ? find_held_lock+0x2c/0x110 [ 2585.570917] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2585.571447] ? mark_held_locks+0x9e/0xe0 [ 2585.571887] ? kmem_cache_free+0xa7/0x2d0 [ 2585.572329] ? __kasan_slab_free+0x122/0x160 [ 2585.572800] ? slab_free_freelist_hook+0xa9/0x180 [ 2585.573352] ? jbd2_journal_stop+0x61f/0xdc0 [ 2585.573860] ? kmem_cache_free+0x249/0x2d0 [ 2585.574349] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2585.574905] do_writepages+0xee/0x2a0 [ 2585.575340] ? page_writeback_cpu_online+0x20/0x20 [ 2585.575899] ? __mark_inode_dirty+0x12e/0xd30 [ 2585.576420] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2585.577081] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2585.577656] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2585.578270] ? generic_perform_write+0x37d/0x4f0 [ 2585.578814] file_write_and_wait_range+0xb6/0x130 [ 2585.579363] ext4_sync_file+0x225/0xde0 [ 2585.579821] ? ext4_getfsmap+0x990/0x990 [ 2585.580286] vfs_fsync_range+0x13d/0x230 [ 2585.580758] ext4_buffered_write_iter+0x34b/0x4a0 [ 2585.581280] ext4_file_write_iter+0xccd/0x1530 [ 2585.581815] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2585.582347] do_iter_readv_writev+0x476/0x750 [ 2585.582857] ? _cond_resched+0x10/0x30 [ 2585.583312] ? new_sync_write+0x660/0x660 [ 2585.583788] ? avc_policy_seqno+0x9/0x70 [ 2585.584225] ? selinux_file_permission+0x92/0x520 [ 2585.584779] ? security_file_permission+0xb1/0xe0 [ 2585.585301] do_iter_write+0x191/0x700 [ 2585.585735] vfs_writev+0x1ae/0x620 [ 2585.586127] ? vfs_iter_write+0xa0/0xa0 [ 2585.586553] ? __fdget_pos+0xf1/0x190 [ 2585.586960] ? lock_downgrade+0x6d0/0x6d0 [ 2585.587407] ? ksys_write+0x12d/0x260 [ 2585.587818] ? __fget_files+0x2f8/0x520 [ 2585.588256] do_writev+0x139/0x300 [ 2585.588637] ? vfs_writev+0x620/0x620 [ 2585.589077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.589648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.590199] do_syscall_64+0x33/0x40 [ 2585.590596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.591142] RIP: 0033:0x7f55f59a1b19 [ 2585.591540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.593499] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2585.594313] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2585.595072] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2585.595831] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.596588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.597344] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 [ 2585.639452] FAULT_INJECTION: forcing a failure. [ 2585.639452] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.641039] CPU: 1 PID: 11767 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2585.641946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.642827] Call Trace: [ 2585.643115] dump_stack+0x107/0x167 [ 2585.643504] should_fail.cold+0x5/0xa [ 2585.643913] should_failslab+0x5/0x20 [ 2585.644319] __kmalloc_node_track_caller+0x74/0x3b0 [ 2585.644856] ? alloc_uevent_skb+0x7b/0x210 [ 2585.645312] __alloc_skb+0xb1/0x5b0 [ 2585.645712] alloc_uevent_skb+0x7b/0x210 [ 2585.646150] kobject_uevent_env+0xce1/0xfd0 [ 2585.646612] ? software_node_notify+0xf8/0x2f0 [ 2585.647103] device_del+0xa8f/0x1180 [ 2585.647504] ? uevent_show+0x390/0x390 [ 2585.647926] unregister_netdevice_many+0xbb7/0x1490 [ 2585.648461] ? netdev_pick_tx+0xc70/0xc70 [ 2585.648938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.649504] ? queue_delayed_work_on+0xb4/0xe0 [ 2585.649988] ? trace_hardirqs_on+0x5b/0x180 [ 2585.650448] unregister_netdevice_queue+0x201/0x2c0 [ 2585.650978] ? unregister_netdevice_many+0x1490/0x1490 [ 2585.651538] ? linkwatch_fire_event+0x63/0x190 [ 2585.652027] __tun_detach+0xfc1/0x12b0 [ 2585.652443] ? tun_chr_close+0x8e/0x250 [ 2585.652869] tun_chr_close+0xc4/0x250 [ 2585.653273] __fput+0x285/0x9f0 [ 2585.653644] ? __tun_detach+0x12b0/0x12b0 [ 2585.654091] task_work_run+0xe2/0x1a0 [ 2585.654501] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2585.655026] syscall_exit_to_user_mode+0x38/0x1d0 [ 2585.655539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.656084] RIP: 0033:0x7f76b1fa0b19 [ 2585.656481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.658436] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2585.659245] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2585.660002] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2585.660758] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.661521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.662279] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x2000}, 0x0) 21:59:32 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfdef}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 36) 21:59:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x10000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:59:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 46) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x3) 21:59:33 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0506617, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2598.547106] FAULT_INJECTION: forcing a failure. [ 2598.547106] name failslab, interval 1, probability 0, space 0, times 0 [ 2598.549790] CPU: 1 PID: 11800 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2598.551409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2598.553384] Call Trace: [ 2598.554033] dump_stack+0x107/0x167 [ 2598.554910] should_fail.cold+0x5/0xa [ 2598.555807] ? create_object.isra.0+0x3a/0xa30 [ 2598.556875] should_failslab+0x5/0x20 [ 2598.557798] kmem_cache_alloc+0x5b/0x310 [ 2598.558798] ? create_object.isra.0+0x3ad/0xa30 [ 2598.559886] create_object.isra.0+0x3a/0xa30 [ 2598.560909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2598.562112] kmem_cache_alloc+0x159/0x310 [ 2598.563088] ext4_mb_new_blocks+0x698/0x45c0 [ 2598.564104] ? jbd2_journal_dirty_metadata+0x5d9/0xa10 [ 2598.565341] ? __jbd2_journal_file_buffer+0x529/0x7e0 [ 2598.566555] ? do_raw_spin_unlock+0x4f/0x220 [ 2598.567579] ? _raw_spin_unlock+0x1a/0x30 [ 2598.568551] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 2598.569782] ? ext4_discard_preallocations+0xd80/0xd80 [ 2598.571007] ? __ext4_handle_dirty_metadata+0x1f3/0x720 [ 2598.572243] ext4_ind_map_blocks+0x17e4/0x2170 [ 2598.573331] ? ext4_free_branches+0x680/0x680 [ 2598.574391] ? lock_release+0x680/0x680 [ 2598.575307] ? lock_downgrade+0x6d0/0x6d0 [ 2598.576278] ? down_write_killable+0x180/0x180 [ 2598.577391] ext4_map_blocks+0x902/0x1910 [ 2598.578623] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2598.579919] ? trace_hardirqs_on+0x5b/0x180 [ 2598.581180] ? kmem_cache_alloc+0x2a6/0x310 [ 2598.582456] ext4_writepages+0x19bf/0x3350 [ 2598.583711] ? ext4_da_write_end+0x21e/0x9c0 [ 2598.584965] ? generic_perform_write+0x2bf/0x4f0 [ 2598.586343] ? vfs_writev+0x1ae/0x620 [ 2598.587475] ? lock_acquire+0x197/0x470 [ 2598.588626] ? find_held_lock+0x2c/0x110 [ 2598.589678] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2598.590966] ? mark_held_locks+0x9e/0xe0 [ 2598.591998] ? kmem_cache_free+0xa7/0x2d0 [ 2598.593001] ? __kasan_slab_free+0x122/0x160 [ 2598.594105] ? slab_free_freelist_hook+0xa9/0x180 [ 2598.595256] ? jbd2_journal_stop+0x61f/0xdc0 [ 2598.596338] ? kmem_cache_free+0x249/0x2d0 [ 2598.597372] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2598.598596] do_writepages+0xee/0x2a0 [ 2598.599523] ? page_writeback_cpu_online+0x20/0x20 [ 2598.600696] ? __mark_inode_dirty+0x12e/0xd30 [ 2598.601987] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2598.603459] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2598.604744] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2598.606123] ? generic_perform_write+0x37d/0x4f0 [ 2598.606986] file_write_and_wait_range+0xb6/0x130 [ 2598.607805] ext4_sync_file+0x225/0xde0 [ 2598.608492] ? ext4_getfsmap+0x990/0x990 [ 2598.609182] vfs_fsync_range+0x13d/0x230 [ 2598.609892] ext4_buffered_write_iter+0x34b/0x4a0 [ 2598.610720] ext4_file_write_iter+0xccd/0x1530 [ 2598.611517] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2598.612315] do_iter_readv_writev+0x476/0x750 [ 2598.613089] ? _cond_resched+0x10/0x30 [ 2598.613762] ? new_sync_write+0x660/0x660 [ 2598.614475] ? avc_policy_seqno+0x9/0x70 [ 2598.615176] ? selinux_file_permission+0x92/0x520 [ 2598.616013] ? security_file_permission+0xb1/0xe0 [ 2598.616831] do_iter_write+0x191/0x700 [ 2598.617497] vfs_writev+0x1ae/0x620 [ 2598.618122] ? vfs_iter_write+0xa0/0xa0 [ 2598.618796] ? __fdget_pos+0xf1/0x190 [ 2598.619439] ? lock_downgrade+0x6d0/0x6d0 [ 2598.620142] ? ksys_write+0x12d/0x260 [ 2598.620792] ? __fget_files+0x2f8/0x520 [ 2598.621476] do_writev+0x139/0x300 [ 2598.622092] ? vfs_writev+0x620/0x620 [ 2598.622736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2598.623623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.624497] do_syscall_64+0x33/0x40 [ 2598.625123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2598.625994] RIP: 0033:0x7f55f59a1b19 [ 2598.626631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.629762] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2598.631046] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2598.632256] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2598.633478] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.634689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.635892] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 [ 2598.647961] FAULT_INJECTION: forcing a failure. [ 2598.647961] name failslab, interval 1, probability 0, space 0, times 0 [ 2598.649577] CPU: 0 PID: 11794 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2598.650434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2598.651437] Call Trace: [ 2598.651764] dump_stack+0x107/0x167 [ 2598.652209] should_fail.cold+0x5/0xa [ 2598.652683] should_failslab+0x5/0x20 [ 2598.653149] __kmalloc_node_track_caller+0x74/0x3b0 [ 2598.653779] ? alloc_uevent_skb+0x7b/0x210 [ 2598.654304] __alloc_skb+0xb1/0x5b0 [ 2598.654755] alloc_uevent_skb+0x7b/0x210 [ 2598.655248] kobject_uevent_env+0xce1/0xfd0 [ 2598.655774] ? software_node_notify+0xf8/0x2f0 [ 2598.656336] device_del+0xa8f/0x1180 [ 2598.656793] ? uevent_show+0x390/0x390 [ 2598.657276] unregister_netdevice_many+0xbb7/0x1490 [ 2598.657903] ? netdev_pick_tx+0xc70/0xc70 [ 2598.658411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2598.659045] ? queue_delayed_work_on+0xb4/0xe0 [ 2598.659596] ? trace_hardirqs_on+0x5b/0x180 [ 2598.660116] unregister_netdevice_queue+0x201/0x2c0 [ 2598.660841] ? unregister_netdevice_many+0x1490/0x1490 [ 2598.661676] ? linkwatch_fire_event+0x63/0x190 [ 2598.662399] __tun_detach+0xfc1/0x12b0 [ 2598.663026] tun_chr_close+0xc4/0x250 [ 2598.663630] __fput+0x285/0x9f0 [ 2598.664159] ? __tun_detach+0x12b0/0x12b0 [ 2598.664818] task_work_run+0xe2/0x1a0 [ 2598.665429] exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2598.666237] syscall_exit_to_user_mode+0x38/0x1d0 [ 2598.666999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2598.667826] RIP: 0033:0x7f76b1fa0b19 [ 2598.668426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.671449] RSP: 002b:00007f76af516188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2598.672659] RAX: 0000000000000003 RBX: 00007f76b20b3f60 RCX: 00007f76b1fa0b19 [ 2598.673820] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2598.674943] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.676074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.677204] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) (fail_nth: 37) 21:59:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4) 21:59:44 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc080661a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:44 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95ea", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:44 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1000004}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:44 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x3000}, 0x0) 21:59:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 47) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:44 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x100000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2610.435138] FAULT_INJECTION: forcing a failure. [ 2610.435138] name failslab, interval 1, probability 0, space 0, times 0 [ 2610.437602] CPU: 0 PID: 11830 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2610.439082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2610.440834] Call Trace: [ 2610.441401] dump_stack+0x107/0x167 [ 2610.442187] should_fail.cold+0x5/0xa [ 2610.443003] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2610.443967] should_failslab+0x5/0x20 [ 2610.444779] kmem_cache_alloc+0x5b/0x310 [ 2610.445649] ext4_mb_new_blocks+0x698/0x45c0 [ 2610.446596] ? jbd2_journal_dirty_metadata+0x5d9/0xa10 [ 2610.447721] ? __jbd2_journal_file_buffer+0x529/0x7e0 [ 2610.448828] ? do_raw_spin_unlock+0x4f/0x220 [ 2610.449768] ? _raw_spin_unlock+0x1a/0x30 [ 2610.450652] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 2610.451763] ? ext4_discard_preallocations+0xd80/0xd80 [ 2610.452884] ? __ext4_handle_dirty_metadata+0x1f3/0x720 [ 2610.454032] ext4_ind_map_blocks+0x17e4/0x2170 [ 2610.455023] ? ext4_free_branches+0x680/0x680 [ 2610.455990] ? lock_release+0x680/0x680 [ 2610.456842] ? lock_downgrade+0x6d0/0x6d0 [ 2610.457765] ? down_write_killable+0x180/0x180 [ 2610.458748] ext4_map_blocks+0x902/0x1910 [ 2610.459644] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2610.460595] ? trace_hardirqs_on+0x5b/0x180 [ 2610.461520] ? kmem_cache_alloc+0x2a6/0x310 [ 2610.462452] ext4_writepages+0x19bf/0x3350 [ 2610.463365] ? ext4_da_write_end+0x21e/0x9c0 [ 2610.464298] ? generic_perform_write+0x2bf/0x4f0 [ 2610.465306] ? vfs_writev+0x1ae/0x620 [ 2610.466140] ? lock_acquire+0x197/0x470 [ 2610.466987] ? find_held_lock+0x2c/0x110 [ 2610.467849] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2610.468893] ? mark_held_locks+0x9e/0xe0 [ 2610.469778] ? kmem_cache_free+0xa7/0x2d0 [ 2610.470657] ? __kasan_slab_free+0x122/0x160 [ 2610.471595] ? slab_free_freelist_hook+0xa9/0x180 [ 2610.472616] ? jbd2_journal_stop+0x61f/0xdc0 [ 2610.473549] ? kmem_cache_free+0x249/0x2d0 [ 2610.474466] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2610.475493] do_writepages+0xee/0x2a0 [ 2610.476297] ? page_writeback_cpu_online+0x20/0x20 [ 2610.477330] ? __mark_inode_dirty+0x12e/0xd30 [ 2610.478306] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2610.479526] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2610.480577] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2610.481723] ? generic_perform_write+0x37d/0x4f0 [ 2610.482733] file_write_and_wait_range+0xb6/0x130 [ 2610.483752] ext4_sync_file+0x225/0xde0 [ 2610.484594] ? ext4_getfsmap+0x990/0x990 [ 2610.485458] vfs_fsync_range+0x13d/0x230 [ 2610.486332] ext4_buffered_write_iter+0x34b/0x4a0 [ 2610.487357] ext4_file_write_iter+0xccd/0x1530 [ 2610.488336] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2610.489318] do_iter_readv_writev+0x476/0x750 [ 2610.490276] ? _cond_resched+0x10/0x30 [ 2610.491100] ? new_sync_write+0x660/0x660 [ 2610.491975] ? avc_policy_seqno+0x9/0x70 [ 2610.492839] ? selinux_file_permission+0x92/0x520 [ 2610.493870] ? security_file_permission+0xb1/0xe0 [ 2610.494903] do_iter_write+0x191/0x700 [ 2610.495752] vfs_writev+0x1ae/0x620 [ 2610.496526] ? vfs_iter_write+0xa0/0xa0 [ 2610.497367] ? __fdget_pos+0xf1/0x190 [ 2610.498185] ? lock_downgrade+0x6d0/0x6d0 [ 2610.499068] ? ksys_write+0x12d/0x260 [ 2610.499881] ? __fget_files+0x2f8/0x520 [ 2610.500743] do_writev+0x139/0x300 [ 2610.501502] ? vfs_writev+0x620/0x620 [ 2610.502322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2610.503432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2610.504527] do_syscall_64+0x33/0x40 [ 2610.505326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2610.506422] RIP: 0033:0x7f55f59a1b19 [ 2610.507217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2610.511122] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2610.512727] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2610.514244] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2610.515749] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2610.517253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2610.518771] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:59:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x4000}, 0x0) [ 2610.596592] FAULT_INJECTION: forcing a failure. [ 2610.596592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2610.601383] CPU: 1 PID: 11831 Comm: syz-executor.0 Not tainted 5.10.250 #1 [ 2610.602855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2610.604595] Call Trace: [ 2610.605159] dump_stack+0x107/0x167 [ 2610.605936] should_fail.cold+0x5/0xa [ 2610.606740] _copy_to_user+0x2e/0x180 [ 2610.607546] simple_read_from_buffer+0xcc/0x160 [ 2610.608535] proc_fail_nth_read+0x198/0x230 [ 2610.609443] ? proc_sessionid_read+0x230/0x230 [ 2610.610408] ? security_file_permission+0xb1/0xe0 [ 2610.611423] ? proc_sessionid_read+0x230/0x230 [ 2610.612376] vfs_read+0x228/0x620 [ 2610.613110] ksys_read+0x12d/0x260 [ 2610.613892] ? vfs_write+0xb10/0xb10 [ 2610.614683] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2610.615788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2610.616878] do_syscall_64+0x33/0x40 [ 2610.617663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2610.618752] RIP: 0033:0x7f76b1f5369c [ 2610.619538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2610.623425] RSP: 002b:00007f76af516170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2610.625037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f76b1f5369c [ 2610.626546] RDX: 000000000000000f RSI: 00007f76af5161e0 RDI: 0000000000000007 [ 2610.628040] RBP: 00007f76af5161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2610.629538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2610.631060] R13: 00007fff9d0b5bdf R14: 00007f76af516300 R15: 0000000000022000 21:59:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 48) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:45 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x200000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:59:45 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0c0583b, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x5) 21:59:45 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4000001}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:45 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95ea", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x6000}, 0x0) [ 2610.750540] FAULT_INJECTION: forcing a failure. [ 2610.750540] name failslab, interval 1, probability 0, space 0, times 0 [ 2610.753072] CPU: 0 PID: 11852 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2610.754548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2610.756306] Call Trace: [ 2610.756873] dump_stack+0x107/0x167 [ 2610.757648] should_fail.cold+0x5/0xa [ 2610.758476] ? create_object.isra.0+0x3a/0xa30 [ 2610.759444] should_failslab+0x5/0x20 [ 2610.760248] kmem_cache_alloc+0x5b/0x310 [ 2610.761112] create_object.isra.0+0x3a/0xa30 [ 2610.762050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2610.763131] kmem_cache_alloc+0x159/0x310 [ 2610.764025] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2610.764996] ? __jbd2_journal_file_buffer+0x529/0x7e0 [ 2610.766097] ? do_raw_spin_unlock+0x4f/0x220 [ 2610.767038] ? _raw_spin_unlock+0x1a/0x30 [ 2610.767926] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 2610.769047] ? ext4_discard_preallocations+0xd80/0xd80 [ 2610.770179] ? __ext4_handle_dirty_metadata+0x1f3/0x720 [ 2610.771333] ext4_ind_map_blocks+0x17e4/0x2170 [ 2610.772326] ? ext4_free_branches+0x680/0x680 [ 2610.773297] ? lock_release+0x680/0x680 [ 2610.774180] ? lock_downgrade+0x6d0/0x6d0 [ 2610.775076] ? down_write_killable+0x180/0x180 [ 2610.776059] ext4_map_blocks+0x902/0x1910 [ 2610.776952] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2610.777922] ? trace_hardirqs_on+0x5b/0x180 [ 2610.778840] ? kmem_cache_alloc+0x2a6/0x310 [ 2610.779761] ext4_writepages+0x19bf/0x3350 [ 2610.780666] ? ext4_da_write_end+0x21e/0x9c0 [ 2610.781592] ? generic_perform_write+0x2bf/0x4f0 [ 2610.782611] ? vfs_writev+0x1ae/0x620 [ 2610.783433] ? lock_acquire+0x197/0x470 [ 2610.784272] ? find_held_lock+0x2c/0x110 [ 2610.785140] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2610.786206] ? mark_held_locks+0x9e/0xe0 [ 2610.787083] ? kmem_cache_free+0xa7/0x2d0 [ 2610.787958] ? __kasan_slab_free+0x122/0x160 [ 2610.788896] ? slab_free_freelist_hook+0xa9/0x180 [ 2610.789938] ? jbd2_journal_stop+0x61f/0xdc0 [ 2610.790868] ? kmem_cache_free+0x249/0x2d0 [ 2610.791777] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2610.792810] do_writepages+0xee/0x2a0 [ 2610.793618] ? page_writeback_cpu_online+0x20/0x20 [ 2610.794661] ? __mark_inode_dirty+0x12e/0xd30 [ 2610.795626] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2610.796868] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2610.797949] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2610.799088] ? generic_perform_write+0x37d/0x4f0 [ 2610.800098] file_write_and_wait_range+0xb6/0x130 [ 2610.801132] ext4_sync_file+0x225/0xde0 [ 2610.801983] ? ext4_getfsmap+0x990/0x990 [ 2610.802938] vfs_fsync_range+0x13d/0x230 [ 2610.803808] ext4_buffered_write_iter+0x34b/0x4a0 [ 2610.804832] ext4_file_write_iter+0xccd/0x1530 [ 2610.805824] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2610.806800] do_iter_readv_writev+0x476/0x750 [ 2610.807745] ? _cond_resched+0x10/0x30 [ 2610.808567] ? new_sync_write+0x660/0x660 [ 2610.809469] ? avc_policy_seqno+0x9/0x70 [ 2610.810344] ? selinux_file_permission+0x92/0x520 [ 2610.811364] ? security_file_permission+0xb1/0xe0 [ 2610.812392] do_iter_write+0x191/0x700 [ 2610.813228] vfs_writev+0x1ae/0x620 [ 2610.814013] ? vfs_iter_write+0xa0/0xa0 [ 2610.814854] ? __fdget_pos+0xf1/0x190 [ 2610.815658] ? lock_downgrade+0x6d0/0x6d0 [ 2610.816537] ? ksys_write+0x12d/0x260 [ 2610.817348] ? __fget_files+0x2f8/0x520 [ 2610.818213] do_writev+0x139/0x300 [ 2610.818971] ? vfs_writev+0x620/0x620 [ 2610.819777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2610.820893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2610.821998] do_syscall_64+0x33/0x40 [ 2610.822789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2610.823867] RIP: 0033:0x7f55f59a1b19 [ 2610.824654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2610.828545] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2610.830160] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2610.831674] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2610.833183] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2610.834695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2610.836213] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 21:59:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 21:59:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x7e00}, 0x0) 21:59:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x6) 21:59:59 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x20000241}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 21:59:59 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95ea", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x2) 21:59:59 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x400000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:59:59 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x200000}, 0x0) 21:59:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 49) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2625.192913] FAULT_INJECTION: forcing a failure. [ 2625.192913] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.195659] CPU: 1 PID: 11895 Comm: syz-executor.7 Not tainted 5.10.250 #1 [ 2625.197276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.199222] Call Trace: [ 2625.199847] dump_stack+0x107/0x167 [ 2625.200706] should_fail.cold+0x5/0xa [ 2625.201601] ? jbd2_journal_add_journal_head+0x1a3/0x540 [ 2625.202856] should_failslab+0x5/0x20 [ 2625.203741] kmem_cache_alloc+0x5b/0x310 [ 2625.204694] jbd2_journal_add_journal_head+0x1a3/0x540 [ 2625.205961] jbd2_journal_get_create_access+0x40/0x570 [ 2625.207222] __ext4_journal_get_create_access+0x43/0x90 [ 2625.208491] ext4_ind_map_blocks+0xbb0/0x2170 [ 2625.209605] ? ext4_free_branches+0x680/0x680 [ 2625.210713] ? lock_release+0x680/0x680 [ 2625.211778] ? lock_downgrade+0x6d0/0x6d0 [ 2625.212790] ? down_write_killable+0x180/0x180 [ 2625.213936] ext4_map_blocks+0x902/0x1910 [ 2625.215144] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2625.216208] ? trace_hardirqs_on+0x5b/0x180 [ 2625.217329] ? kmem_cache_alloc+0x2a6/0x310 [ 2625.218393] ext4_writepages+0x19bf/0x3350 [ 2625.219407] ? ext4_da_write_end+0x21e/0x9c0 [ 2625.220454] ? generic_perform_write+0x2bf/0x4f0 [ 2625.221600] ? vfs_writev+0x1ae/0x620 [ 2625.222564] ? lock_acquire+0x197/0x470 [ 2625.223711] ? find_held_lock+0x2c/0x110 [ 2625.224749] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2625.225958] ? mark_held_locks+0x9e/0xe0 [ 2625.226934] ? kmem_cache_free+0xa7/0x2d0 [ 2625.227937] ? __kasan_slab_free+0x122/0x160 [ 2625.229010] ? slab_free_freelist_hook+0xa9/0x180 [ 2625.230255] ? jbd2_journal_stop+0x61f/0xdc0 [ 2625.231357] ? kmem_cache_free+0x249/0x2d0 [ 2625.232522] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2625.233737] do_writepages+0xee/0x2a0 [ 2625.234683] ? page_writeback_cpu_online+0x20/0x20 [ 2625.235876] ? __mark_inode_dirty+0x12e/0xd30 [ 2625.237007] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 2625.238552] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2625.239776] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2625.241105] ? generic_perform_write+0x37d/0x4f0 [ 2625.242304] file_write_and_wait_range+0xb6/0x130 [ 2625.243494] ext4_sync_file+0x225/0xde0 [ 2625.244478] ? ext4_getfsmap+0x990/0x990 [ 2625.245491] vfs_fsync_range+0x13d/0x230 [ 2625.246533] ext4_buffered_write_iter+0x34b/0x4a0 [ 2625.247737] ext4_file_write_iter+0xccd/0x1530 [ 2625.248892] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2625.250074] do_iter_readv_writev+0x476/0x750 [ 2625.251187] ? _cond_resched+0x10/0x30 [ 2625.252148] ? new_sync_write+0x660/0x660 [ 2625.253181] ? avc_policy_seqno+0x9/0x70 [ 2625.254219] ? selinux_file_permission+0x92/0x520 [ 2625.255457] ? security_file_permission+0xb1/0xe0 [ 2625.256680] do_iter_write+0x191/0x700 [ 2625.257683] vfs_writev+0x1ae/0x620 [ 2625.258619] ? vfs_iter_write+0xa0/0xa0 [ 2625.259636] ? __fdget_pos+0xf1/0x190 [ 2625.260691] ? lock_downgrade+0x6d0/0x6d0 [ 2625.261717] ? ksys_write+0x12d/0x260 [ 2625.262722] ? __fget_files+0x2f8/0x520 [ 2625.263766] do_writev+0x139/0x300 [ 2625.264705] ? vfs_writev+0x620/0x620 [ 2625.265679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.267043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.268372] do_syscall_64+0x33/0x40 [ 2625.269487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.270833] RIP: 0033:0x7f55f59a1b19 [ 2625.271951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.276381] RSP: 002b:00007f55f2f17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2625.278026] RAX: ffffffffffffffda RBX: 00007f55f5ab4f60 RCX: 00007f55f59a1b19 [ 2625.279621] RDX: 0000000000000001 RSI: 0000000020001740 RDI: 0000000000000003 [ 2625.281133] RBP: 00007f55f2f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.282670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2625.284209] R13: 00007ffc7a0c80bf R14: 00007f55f2f17300 R15: 0000000000022000 [ 2625.288342] ENOMEM in journal_alloc_journal_head, retrying. 21:59:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x7) 21:59:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x1000000}, 0x0) 21:59:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x8) 21:59:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) (fail_nth: 50) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:59:59 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 21:59:59 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x400000100000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:59:59 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x4}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:00 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x20000000}, 0x0) 22:00:00 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x3) 22:00:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x9) 22:00:14 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:14 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x30000000}, 0x0) 22:00:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x600000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x8}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x7ffff000}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:00:14 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4) 22:00:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x2}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x40000000}, 0x0) 22:00:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xb) 22:00:14 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x60000000}, 0x0) 22:00:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x3}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x700000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:14 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x10}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:14 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x5) 22:00:15 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xb00000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xc) 22:00:28 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffdef}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:00:28 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x7e000000}, 0x0) 22:00:28 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xc04104000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:28 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:28 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x321}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x6) 22:00:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xd) 22:00:28 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xf0ffffff}, 0x0) 22:00:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x5}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:28 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x2000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xf) 22:00:28 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x1000000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7) 22:00:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x10) 22:00:28 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:40 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x400ff40bffc}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:00:40 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffff0}, 0x0) 22:00:40 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x8) 22:00:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x6}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:40 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:40 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x2103}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:40 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x2103000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x11) 22:00:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x13) 22:00:40 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:00:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:40 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xfbffffff00000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xffff88800dd773a8}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:00:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x15) 22:00:54 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xfeffffff00000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x8}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x4000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x30}, 0x0) 22:00:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xa) 22:00:54 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x60}, 0x0) 22:00:54 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffffffffffdef}, {0x0}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:00:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x23) 22:00:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x9}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:00:54 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x80000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7e}, 0x0) 22:00:54 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xff0f000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x261) 22:00:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xb}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:00:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x1a) 22:00:54 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x2}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:08 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x3}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:08 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:08 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xff6f000000000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:01:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x22) 22:01:08 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2000}, 0x0) 22:01:08 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x1000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x281) 22:01:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xc}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x300) 22:01:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xd}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:08 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3000}, 0x0) 22:01:22 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0xffffffff00000000, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:01:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x500) 22:01:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x48) 22:01:22 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4000}, 0x0) 22:01:22 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xf}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:22 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x4000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:22 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x4}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfc3) 22:01:22 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x6000}, 0x0) 22:01:22 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x5}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:22 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x10000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:22 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7e00}, 0x0) 22:01:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x10ab) 22:01:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x10}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:22 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x1000004) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:01:22 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4c) 22:01:36 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x4010040b000) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x10ac) 22:01:36 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x20000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x11}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x200000}, 0x0) 22:01:36 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x6}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:36 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:36 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x55) 22:01:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x13}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1000000}, 0x0) 22:01:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1100) 22:01:36 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x21030000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x8}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:36 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:36 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0xffffffff000) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x15}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:36 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x20000000}, 0x0) 22:01:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1f00) 22:01:37 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x68) 22:01:49 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x6c) 22:01:49 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r4, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:01:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x23}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x30000000}, 0x0) 22:01:49 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x9}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:01:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4000) 22:01:49 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:49 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x40000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4100) 22:01:49 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:01:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x27b}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:01:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x40000000}, 0x0) 22:01:49 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xc}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:04 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x60000000}, 0x0) 22:02:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x8100) 22:02:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x27c}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:04 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:02:04 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xfbffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:04 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0xd25a, 0x1, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:04 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x71) 22:02:04 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xd}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfdef) 22:02:04 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:02:04 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7e000000}, 0x0) 22:02:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x281}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:04 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:04 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xe}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:04 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xfdfdffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:04 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x74) 22:02:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1000004) 22:02:04 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xf0ffffff}, 0x0) 22:02:18 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x10}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x300}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:18 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 22:02:18 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7a) 22:02:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4000001) 22:02:18 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xfeffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:18 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xfffffff0}, 0x0) 22:02:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x500}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x20000241) 22:02:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) 22:02:18 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x12}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:18 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xfffffdfd}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:18 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 22:02:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x107b}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:18 executing program 2: r0 = syz_io_uring_setup(0x49fb, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:30 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xf8) 22:02:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x7ffff000) 22:02:30 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x2cc31f8dab30a67b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:31 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xf1}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:31 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xffffff7f}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1100}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:31 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 22:02:31 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 22:02:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfffffdef) 22:02:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1163}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:31 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x7e}, 0x0) 22:02:31 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x102}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:31 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 22:02:31 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xfffffffb}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:31 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000300)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6e, 0x0, @perf_bp={0x0}, 0x0, 0x40000000, 0x4, 0x0, 0x240000000000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x10}, 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) mknodat$null(r0, &(0x7f0000000340)='./file0/file0\x00', 0x4, 0x103) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x9b}) fallocate(r3, 0x1b, 0x10003, 0x7ff8) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(0xffffffffffffffff, 0x3da1, 0x3a0d, 0x3, &(0x7f0000000200)={[0xff]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) 22:02:31 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x209) 22:02:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfffffff5) 22:02:45 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/20, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1164}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x300) 22:02:45 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x109}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:45 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0xfffffffe}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x400ff40bffc) 22:02:45 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 22:02:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) 22:02:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xffff88800dd77068) 22:02:46 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x0) 22:02:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1f00}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:46 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x201}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:46 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 22:02:59 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x4}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfffffffffffffdef) 22:02:59 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x281}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x3ed) 22:02:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 22:02:59 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file1\x00']) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7fff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3, 0x6, 0x81, 0x1f, 0x0, 0x4, 0x8000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext={0x5, 0x6}, 0x800, 0x5, 0x0, 0x5, 0x8, 0x200, 0x7f, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, r4, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) fallocate(r6, 0x3, 0x0, 0x7fff) writev(r6, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4000}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:59 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x208, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vxcan1\x00', 0x1, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="210000001800000000000000fc2035444850a878337e80c4788d2b58e7c64e1d3462bf4d1494fd02cd8f6bb6ef55d75899f8c310dda536cf76594bffa5d0e6f430f6353fa3f261d5009eac7490a6be61e2a347d3b3608437240aeb37ac1c60fa8eee5b6490b94e7e171ab8173c20f06c873aa90f9f1d39dddb6c1dc6d40f7a67c26c9996ca08a3e546700c3c95eab2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 22:02:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) 22:02:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4100}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:59 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x300}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:02:59 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02004000000000002e2f66696c653000"]) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:02:59 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x8}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:02:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x7e00}, 0x0) 22:02:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x500) 22:02:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) io_setup(0x1, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x60140, 0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfeffff}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/87, 0x57}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}, 0x2002) io_cancel(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x3, r3, &(0x7f00000006c0)="45214b8e995de0d441939acd86fb89e276f8bfd620af3254f4d6bebe604f8b65d36d9b3c4a6836404172dd1ee0c6f04733dbdf46a265efb8dd67dd105e1e3af0243f4d89aa5f012a5cff2fad46d5b1d85f90681f14fe8d5dd020679de578b97305e6010de86e0b4f5ade34b5f1a0fbc146c25396ce97b54b54952a8711bbba1166", 0x81, 0xe30}, &(0x7f00000007c0)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:02:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x8100}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfdef}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:11 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x321}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:11 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x500) 22:03:11 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x10}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0) 22:03:11 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x3f, &(0x7f0000000280)=[r2, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x5) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:03:11 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x600) 22:03:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x250, 0x1f, 0x1, 0x70bd26, 0x25dfdbff, {0x18}, [@typed={0x8, 0x2f, 0x0, 0x0, @u32=0x8}, @nested={0xd2, 0x44, 0x0, 0x1, [@generic="caa9f2a9641858154c8a20a1532934d0606c72fedfa0d67613d2219ba8c8c09548e63d6845c11501d6166d77b81886f8d832a0528a48dbbb2ab77c0cbc1055d8d26738deca17911f8a7f5e430ba20381b7ea48d8c9c939eef860d32cf84085a997170ad74bd0f96ce3f95df66e93d9e95113628026d7d32af2d5d8e25c144d86624419c77968e0f9d7c02ac553158861070fbcd03ae3214c39d1a4dec68744f076a4658d961f8599af78ef2bdd26781eb3934d966aa7d9884b4b56c5e3b27c6fa1621a952e9adb1ec6c13bcda6af", @generic]}, @nested={0xfb, 0xa, 0x0, 0x1, [@generic="9b737c084310d2e6126ef1d697243b1dd614d942fc1e01a72b3022101e95a14606036f5bc3321667290d60fa36364cd3e045c368c9ca134bac0a2348df01a2b59aa3ce08af4947d616b785af3f7b6eb907c924c5840baab1cddf3ef47dd5d753771c187f29fcea4a051829e62a5292c22e3862d058f2c9a5eff0abe7fb29845c76879dec55c037d48949d794891e983b47ef5a6ba1a6e38545c07824e507294deb4f7d4a68b55da8be50736c5b350d8574b2e6f8b58e708dcf990ee5564787d02155f7d5f199442da3233925400f60102aa3be69b93fde1c6b57806bda6507512168a3d39a7e2611b3c3f2682bb13fa1ff55ec509e4b33"]}, @generic="192aa537a2cd8ea557a477f451ab8c53c29af2fc0ae956829daf53f0a84acbd428d862a998c9a675e6869fb2ad30b9319fb8da5aa840e73675b5ee6d6e025c3fa75f8952dab7250534acd268ccce55", @typed={0xc, 0x57, 0x0, 0x0, @u64=0x8}, @typed={0x6, 0x3f, 0x0, 0x0, @str='[\x00'}]}, 0x250}, 0x1, 0x0, 0x0, 0xaf7525f665ca67f1}, 0x40) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000000008000200080000001400018005000200000000000008000200"/50], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000001) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000540)={0x0, 0x2, 0x7}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:03:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) 22:03:11 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x300}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x88cc}}, './file0\x00'}) fspick(r1, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_io_uring_setup(0x43ff, &(0x7f0000000080)={0x0, 0xdda9, 0x17, 0x0, 0x13e, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) fallocate(r0, 0x2, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:03:11 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x321}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1000004}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:11 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x482}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) 22:03:11 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x700) 22:03:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x4000001}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:23 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x902) 22:03:23 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x2000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:23 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x1000200b}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r5, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r6, 0x1000004) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x0, 0x3ad, 0x0, r6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:03:23 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x500}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs2/binder0\x00', 0x800, 0x0) sendfile(r2, r0, &(0x7f0000000900)=0x101, 0x4) fallocate(r1, 0x33, 0x40, 0x8003) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000200)=[r4]}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000002c0)={r1, 0x0, 0x6, 0x8}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000300)="b1", 0x1}, {&(0x7f0000000340)="02db6bf4e74928afabad620a459e7404c433480856f486f56e8a4a5f9d15aba3e87334fd3f1683b2d67da6e6c469cefd756a79e2d1257a27b844d3518398bf3be1394b758ea9eb54a84b5e75ead499d1775aea8c802d24f6150f3343ff328f083e9c729e926c3c38bbf4a3e75fe1ba8aa691c74ed21a4681aa7cfefb03907dcd2047068a873412d1812eec315a2ebdd58b3e526ec3f7e97a7915125ee1919a1f3ff885945345868da1a29c0a08a5446372f95744af9b5f141e2d5a36165b534515cf5a98189b151e53b7551b7a5a9ad1bb897aa8666e9e946bc4f3ea32cf54367293257ad959585c50c1cb819315", 0xee}], 0x2) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) openat(r5, &(0x7f0000000480)='./file0\x00', 0x4aaf00, 0x2) fallocate(r0, 0x3, 0x0, 0x7fff) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0xce1, 0x7}, {0x81, 0x3ff}]}, 0x14, 0x2) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:03:23 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x30000000}, 0x0) 22:03:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1000004}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:23 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x582}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:23 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0) 22:03:23 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x110, r0, 0xc6a9e000) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000280)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:03:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) sendfile(r0, r1, &(0x7f00000000c0)=0x2, 0x3) 22:03:23 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x2103}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:23 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x600}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:37 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) 22:03:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x20000241}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1000004}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:37 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x900}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:37 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xa00) 22:03:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0xffffffffffffffff) 22:03:37 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000280)) 22:03:37 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x4000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:38 executing program 1: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x40}) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r1], 0x1) 22:03:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x7e000000}, 0x0) 22:03:38 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x80000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:38 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x901}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:38 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{0x77359400}}, 0x0) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:03:38 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x1a00) 22:03:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, 0x0) 22:03:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) uselib(&(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:03:38 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x1000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1000004}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x7ffff000}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x2000) 22:03:54 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xc00}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x0) 22:03:54 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) 22:03:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="bdfc0be47932cc69eef85a048b9a646545a0a1fd257e2be52899654e07ee828ca6217e83bfa4fa73c67e06cd73da1fde21cb33e5bb4189b56cdbead84e6c252506c8f28542d9ab0730a3e18fd02e782373cf22a44508a2ce24fb890fdb39e0adc120ba342619547188c2ff21f39b88f343b200b5786136ef5de1049241a6f519fc93681b2d68ee4b73f447cf86f71156182ee3a40e2cda5d3e72b0067ed5ff21dee300218bffd87760b666decca86e2b97d49ee9c4e804add706a1b04ff0abce2bfecff730822eecf6cae110e46b5cfd3955f6ea8e9b8d27868e4873472d8e55057f9c9154bc370b720e99f20402f3bf11fef485a03801493b", 0xf9}], 0x1) 22:03:54 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x4000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0) 22:03:54 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x10000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:03:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x65de, 0x1}, {0x8d67, 0x1}], r2}, 0x18, 0x1) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:03:54 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xd00}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:03:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) 22:03:54 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x50bc, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) io_uring_setup(0x4044, &(0x7f0000000300)={0x0, 0x85bb, 0x8, 0x3, 0x5, 0x0, r6}) 22:03:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x2200) 22:03:54 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xe00}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x7ffff000}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) writev(r0, &(0x7f0000000100), 0x106c) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) 22:04:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffdef}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:09 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x20000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:09 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0) 22:04:09 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x1200}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:09 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x3f00) 22:04:09 executing program 2: r0 = syz_io_uring_setup(0x70a2, &(0x7f00000001c0)={0x0, 0x942a, 0x4, 0x2000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1002, 0x40000000}, 0x0, 0xe, 0xffffffffffffffff, 0x1) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r7}}, 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r8, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000000)) fallocate(r8, 0x3, 0x0, 0x7fff) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000440)='\'', 0x1}, {0x0, 0x6}, {&(0x7f0000000280)="518cef374b274afe84592d1e88c50cae94aa0581d7c5f8", 0x17}, {&(0x7f0000000300)="0f66fe69c8274f4f6b094ba3ed51b75edc92b84dc50c2da3fe8ebc12ba31dc328c79151075b7fafb0db22ff45335218973679619142bcef7fe355a7efa07a0e0686e768ffaf5782e1a84a8753464b0a5cd6816087ce4a6b9e7595c60f8833093d6c1c486767cb82c942a653234f72c498f280034f98e8705bb3c465c7678dd8d7fe3e2136087da2edb7be3cbc2113ee8fe8a999cd59a57d44a16fb1a7d884450d413e50217b62337f52734e7caee55d96b87eb33d1b0921fe3335cb43dc7389c300ef5a0dd0e8b46", 0xc8}], 0x4) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r9, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:09 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x2000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:09 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x4, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x1000004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000007, 0x100010, r0, 0x8000000) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x20, 0x2, &(0x7f0000000300)="c45ca85f4c6efd862ab08a8249dea4cca4ff8a8d22c728f4265c0f4c9e37bf2783b64bd69d33d19a2f225abe7a867799041729b66be0da5c637a808fe2921f18ce5fca9476349290956fbfaa4733b29968af6632346970203cfdcb95d8c511d58f08", 0x2, 0x0, 0x0, {0x1}}, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0x1ff}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4000) 22:04:10 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x0) 22:04:10 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x21030000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:10 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x2103}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:10 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2004, @fd_index=0x6, 0x0, 0x1f, 0x9, 0x10, 0xdc5d421e8afce9be, {0x1}}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:23 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x4, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x1000004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000007, 0x100010, r0, 0x8000000) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x20, 0x2, &(0x7f0000000300)="c45ca85f4c6efd862ab08a8249dea4cca4ff8a8d22c728f4265c0f4c9e37bf2783b64bd69d33d19a2f225abe7a867799041729b66be0da5c637a808fe2921f18ce5fca9476349290956fbfaa4733b29968af6632346970203cfdcb95d8c511d58f08", 0x2, 0x0, 0x0, {0x1}}, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x81, 0x8, 0x3, 0x9}, {0x800, 0x2, 0x0, 0x289}]}) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x10000, 0x94000) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000200)={0x0, 0x9, 0x8001, 0x3, 0xfffffffffffffffc, 0x400}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r1, 0x1, 0x1f, 0x4) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x3}) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10082, 0x0) pidfd_open(0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r3 = gettid() write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) rt_sigqueueinfo(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}) prlimit64(r3, 0x1, 0x0, &(0x7f0000000380)) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x38, 0x3b, 0x300, 0x70bd25, 0x25dfdbff, {0x1a}, [@generic="2a820b3b44de5085a5e0e6b2b29f67e020465b088b5f16c1d92b8cd4", @typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048084) 22:04:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x400ff40bffc}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:23 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x112) syz_io_uring_setup(0x738, &(0x7f0000000340)={0x0, 0xb62b, 0x20, 0x3d, 0x2e8, 0x0, r2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x5, 0x2, 0x0, 0x5ab9869f, 0x80122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2, 0x40000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)="99c0c699e35f509a13b01e5df7e304f2d385e58f72a405ce4843d06c84203e51194a34f87e293352128bb7eef106049b012927e4e67c786dfcc7c1af5ac079da28b8ce195e26f5fe79bf2fff7b98672bf93241b51e38340a13ed21a97b58fb4a81d7fd534413af5fda11e75e48e613584f7d7fc29d6c9657b98abd8319acf38373744cba0bac4c2a36a79180f22d2a5e57f2f496", 0x94}, {&(0x7f00000005c0)="ec9bc00c3e0febd1b66afb86bd3ed7020cdd612a39daf603804c58c8cfdd7aed9435d414e1d9feaee26d5e3a996c556fcae3853c124599eb899acaa77925cf662f51451db2db1169d185fce870dd2e64d7af3144c6d37117cb65629ad697a3f6ce13c3cbee7c6f2ece2cfa63af4792e1588496555ba5d7ead2af914e837fd4d5b47f5d88b0e4a1f1", 0x88}, {&(0x7f0000000680)="a8e2acb7aa220d78f24fa612f160abf478", 0x11}, {&(0x7f00000006c0)="a26448fb93eeb2719f22dc793d3c", 0xe}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="58000000000000000401000000000000f706b83566a910ae170ccbd0bad284612272b1527c603addb4dc6822bb9db676567c03ebfa735f4186f897e203259af8528f9c5e2c1d8a591ca606e46f035a01378806360bd34d40"], 0x58}, 0x0, 0x801, 0x1}, 0x6e3) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:23 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x3f00}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:23 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0) 22:04:23 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x40000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:23 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4800) 22:04:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0) 22:04:24 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xfbffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:24 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1}, 0x401) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000}, 0x0) 22:04:24 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x4000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:24 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4c00) 22:04:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:38 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x32001, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x4) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x6, 0x7}) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xffff88800dd773a8}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:38 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x8102}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:38 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xfdfdffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) 22:04:38 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x5500) 22:04:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:04:38 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000280)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0) 22:04:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0xfffffffffffffdef}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:38 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x8204}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:04:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x46}) fallocate(r0, 0x3, 0x0, 0x7fff) fcntl$addseals(r0, 0x409, 0x1) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) 22:04:38 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xfeffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:38 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x6800) 22:04:38 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x8205}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x30}}, 0x0) 22:04:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:53 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xeffd}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:04:53 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6007, @fd=r4, 0x1, 0x0, 0x0, 0x10, 0x3, {0x2}}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) 22:04:53 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x6c00) 22:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x800) signalfd(r1, &(0x7f0000000100)={[0x1]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:04:53 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xfffffdfd}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:04:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x60}}, 0x0) 22:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) copy_file_range(r6, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, 0x0, 0xffff, 0x0) 22:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8001, 0x1}) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:05:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7100) 22:05:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x7e}}, 0x0) 22:05:08 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xf1ff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:08 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x5) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000000080), 0x0) 22:05:08 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2000}}, 0x0) 22:05:08 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xfffffffb}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7400) 22:05:08 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfdef}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:08 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendfile(r1, r2, 0x0, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:05:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:08 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3000}}, 0x0) 22:05:19 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4000}}, 0x0) 22:05:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7a00) 22:05:19 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_setup(0x78bb, &(0x7f0000000300)={0x0, 0x9923, 0x1, 0x2, 0x363, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r5, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r6, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) fallocate(r6, 0x3, 0x0, 0x7fff) writev(r6, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:19 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0xfffffffe}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x7) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x81018}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048070}, 0x4000) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0\x00') writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x4) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x7}]}, 0xc, 0x3) 22:05:19 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xff01}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {}, {}, {0x0, @struct}}) 22:05:19 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) socketpair(0x26, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xff0f}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x9, 0x6, 0xe6, 0x3f, 0x0, 0x10002, 0xc004, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcbd, 0x0, @perf_bp={&(0x7f0000000280)}, 0x5110, 0x7f, 0x2, 0x1, 0x0, 0x9, 0x9, 0x0, 0x3f, 0x0, 0x9}, r3, 0x0, r2, 0x2) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6000}}, 0x0) 22:05:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x20200, 0x23456}, 0xa2df) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x527400, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f00000000c0)={0x0, 0x10000, 0x0, 0x1}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xff, 0x4, 0x7, 0x4, 0x6}) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:05:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xed03) 22:05:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xb) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfff1}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x7e00}}, 0x0) 22:05:32 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x4}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13}, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r6, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) fallocate(r6, 0x3, 0x0, 0x7fff) writev(r6, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xf800) 22:05:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:05:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:45 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x46000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:05:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={0x0, 0x1, r1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r3, "13a918f77968f35510e9c2995f8f145b5a993ed98182f0458528c488d13cb059ebdaf35758b6c4a404e740a316f28bbaf2ba1e0be9dc65eb79525ebe533e5cf9a0255e9728c1d77e372b2c36be4b341cba62603bfec2044d3afccc48519863c67001a67e310b20901d1ff651b95f6446cfe5a8529a0d50486e35b928534fd449ef689a49f3ca9fa17c9dcdd79aa5ce8eab24307435c9fa8f1626428abc21b9e44cb07223508500fdaec1f7e9d7fbbfbc3ce39c68ed5779d9e41801f3b314cdf804ad7bbd560b7f6a88686ab581b4650fd6f7ae2e4a3d08c32f1d6ed93a6e655e75b225f5d9b6c254c6147b919e066cff818d816d5f82ef03878d88dba88bd1c7", "1f29ba4b8ef65904299aa96accedf56281e2fe8632839ea09bbef2d6fa043a0610201771fd8cc653464e85115efaa7dc2fdd50d73d24210e9acc50f098a252942f5c7cf03ec72095ebda04fec64ceffd68165d6c34c6b9f927c84d960188f0208d701413bd45b57610d2ef13d4c299f0a6236113722fc885e2c5662b8aee81fc140ebb09e6bd74405f2c8db6744bb7523f36d7a8338b9810fef6bd03b311af51c76f1c178738f3bf0ba539f37f30064de4bb841d75d7ec33ee66a29b208b7764ad69190dec246e472f01f3b4d5a9d685f129be9e8b1cf57a60fe657e1fdd1412d1dbddff080c6fbce3b5b78e22538faf72c29ea2c53b66139382af3e2b93139fbbed9f27928d1dbb61569f2b509e9b2e7fbb6fdb7cfd5e61d6b723ff12bd7b983979a5b5dc75a6763ac79a752a7b2d041f9f7f23399ce749fe699a838200aac9595cfcb6a415885ea8786be9f702a1923aaddefa668baf4ee0339e1d116f65e677d10ab27c1d885358b7dda8f09bc6c9a110605a99e6093e474c8349ffafb6f0495de805185a6f6b9cd550211e450c8de6f174a782391c32949e8987569aaa4e7b010e56df5eb7cecf492adabd1672eb508a74695284053c11a409006380d7857eefdb143b94cd3eec4dcae86b0633c9ffbaba627b22dd969b7fd53da33e442079bcc85f1a28eacc1506ccf329440d89489bd66d162f4efa79046e9bdbd3c6b200f8c29c50863250eb8f426c7a0e307b8c1366790bab8f106f76239830fd1a59848a3ad964e46714e28a1c32d50a6caae3778169e5fae380b1a92cf9eadda123ddd662d3e94e1778e704d59a0410811828db4b003e319e63063349323073dac1bbf5f86cf0c08fd8e9899d6b0b07d2e6c875573d361bbe24114b8ed8ad2ba1d6eab8825ee75f3a508dcd5de143a78be6cd9934262a39680a38edc5e9c371d93cea62e1b26ea3cf070c989d4fd346981265d86d421d9958df971ce02b62ae36ff5b649e32af08fb150e01b8dec3fc707ea9e0034e43031ab003527954d7ed0248d8bac3a11ff0633dc3293649885b9084575164fbeab339e8c3d3098005d995d5f964b35ea509ef5a9fb2f7edcce220aa6e841537733db920b68d2b62f7f173dde5a620539d79f3bf11632af94107830b824228c6f65a5fc81248093c10ea1c3e85c1768a7554b6c73568384f4d798c13e57c78270f5061abfb9742002e18af3d05c802de8d5bedffbaa65f9ad0cca2597d2ad0756a4f2165900c88b028869f0c5f6e2b33b2dc91f9ebacc0b853db2fc17669dcbcfacea938b92750e0e2ee70e442ca50d83bb2971082a3d7bdeb650314e9c85d483e1ef1af3aabb6afbf382c0fe3708bea60a6ecb19675c5d1c62878d810bcbf3718b8464262914bb78d79ecbadb91e61ba8b36eb68553749799e47ae8394c6145da3c22f7dc4cb08de432aa0c8565a7445aa2820832edaec79677c4e5606dce05e3aa4600fea8b25b6ea3679f9a4a9850cb417ba66e807696682bbb7297a0099c757a108e3ee7a0ce378527fcc74ba143efe02774cedf3b32801e7464d95c2e8db9c34f30cba4031422132c8c0ca719c8ad41a04c3b3d03bd0f5e943c506c410e891c6c5c75de3e8f98eb2526e4b7043559d16304f0ad3f5eba95308383e1d7102d955d42a318a6ab95f4fe0c97d83dc60a1247903d8fc255f1630699c08dca8e0ada169e44ccd60731c627bf09e2354d08cdf7da38d817c1b6911ef5843aadc1051ecafefc244d72fc68ff6290921aa6965309d310c0738f5f195fba530fb7105411bda6a44a3c37087321644b1bffd0e9a9432f90799b83d37c4410e4f3a8c4deb382192512181076cd77204afe9f7d0edebf5502b7867657de21107f9d98dc53e6f17ef9e7d54e836b73932d5b41298cd8b8d3b77531282ac8097e4d2c478cf628c9ea48d760400b16f46dc98cbad396a81eeee2c391cff742be9a1121df8c06676257da66a0faae833c79e371bfde887cdc7ec0a0d77f961bf6a8690c7efb8fb89a764cf9e95049d7d3b644fa6b4c65e45c92aadc67f3242208e3890fff4c176bbd43287f90f06da0a10c62c26b58e9f7d9d144a366a6d4d31fa4eada579f9d293387e7c1893f48569e7e63b06e5f9e9618b5abbddda14d2c2975cc6d4e14753f8bc2fb60a1557ed0fea185a3e8f3c3ec2240497b08289d0c880a2da8643deeda587eda47285bbbff8b288070dd096aca64188feae3df39eea587dc0a35b836552122e74e6e14ef4498fda266b8418fc29c76d26d7f6f33fe54ade08fa11b65afd0941f6702155bd4d48fe4f570a22f7831fbd7f69ff6b8d0fc54da97929d7ddda91d97951eff735fe259e5a972abce810dd1d750fd092669f6d419ec0e3559980b1a65606f0e05be18bef30b506ddcb62d6856872c6a6ebd3cac1272872510b4142836aef1890651af148ba2d8ad8eb8b8f8802b3c9f4e01dcf279a4d0f57556544faf8333ff92fafa035cef10b171012e2434271f44d478da225f3ac09cf5fbd9bbcd516873964b38c14d0a345826bdd0c852bdb592b9856abe2f4f32f2cdda8a660c208339eec4cc91ed62f66c0be5b59156f209dfeddaf410622d31e32834c9613ddd5ce04838513619f6b0cc0b3f2831e25adece2d4fffec0c59760d534d6841c10ea488e35463a0c9df5f8ac5a8de610ebbebd5929fe4b9828cb94e55b192570ef00715c32ff047537914a07b3d32acd41e0b76de957061f67e86c691bf0007b8ad9e817499fd232f5b159b0e126cc38f968999d60e3d66ea3a974696a6a17640b6c83881622a0538cd461ecd2ea3f7ecc87ee8ccc5ecc0366a2fdf15f10f925f2126eb238b7abf633883587251d414f08603c91b88a26310daeb9f6a0b777a1e1e77681ba82f1e1dcb872681528d849735448d969f2ec2d14d574bc4e400f948e2ad22325b91cc819ba81be9a7abcf0a73c6580c0e69b66c440193963e6d9d52df3151358b5958c0d08dcf7a40ea741e1b7eaa0c71ae1da3670b260c9602249183b05c9e2cf18490f54c39f9758db2bdc93741956b5e90482d1d4e641e27b9a83716a7d51dc8652960962419baca2241f2d0400469b6cc5189314af59c6019fa4333fbba779212c7afc016882e36d374381cd17fc947ddb2d0777a4adea78b2b92ace46eab9e215b5addc7bfc7a1786cdfad80097db7059dcb6ac4fc764b3b8c0ac8f247ae1ed16aa915fd6123c2e7e35c2a4c54195f94ab726edcf17d6c3a745f9508873346966e6147c7569873ce024b88e62658544291a4f097da967ac43388bf4bde45b3ba64aafbe5037ddd81258582fc240e4d0b7052911e723ef65a523d7258520611c5a67cf67294c463a1c4722306ca0fadb993816c82cb53fbb8c6868e15f54532fc27d7c032e3dd5f54e2471569e108ea21d3c2e71a1384dc99d24102250661fd4cf33f9928331ab07dabb1160382ca2e2a925a44be59e21b08ff9ed21879559fcfc302553c8a1ecd4274d911614bb9649f6c3ebd1363f06ff8e219c00026e36910bd125a3c232940b54716673e84526420ae15a93278521eb06974f570aff9c50a7eb26be5022e231f5a9880a687b710154ff16fa7bd612a7b9482dd9fe6523d8eefc00d7cef5d41fcd1fdf86c17c49a30d105a8dd6df70eb384ca830a48505e8d0fd8c3bec67e8d668cb2718b10ca06ea24938910d712103ca24b70a5879ecdb143f3ab036f4652e7e155068de1f46a22a0911c607d0c3e82bf3cda3faefa2eca851aa7eed459d893ed0b1424b4240704497e238416e4d6a7368f6a48c573d46cbd7cded1c1bf53e60d99990f336f176990f4d22f67a0b7025ddd034c8edb22effb202abefe445739237e48de8a27724337cf2862d38c425fc62435af8d3c3df494b978b688f0a32dc1195a556b8474b13eda60bf5b4ae2e8ec5dbd3c5c4cb88d81443ac3ec437460a23ab4f9d965c61693b0fd618262481d628d943b1e19c9d8c50f07f7d5f4359eb3b1545c682e30f05f673b585b96e96c8e7de16617b5e6f58baecd67a50f707b92324b8c88ff56fb58799cbf3511b91a7154a4b83a2e9c71933a90ea3499faf398cd98c5bfe6337923b2d09c81dc81c646775e8ec1288bd883e85872f8f0db40cd48220097033cc06f75b282844f1d0b1cac56f26a68de6bae45642602f365fb2cb88c8e56127e45be4e9a500fb81aa5237ff2eb164534bde6876767f4ca427c7481e4cd5c3c94b57068a2f611fafc1ec0b2933e23bc239a1af8010c3f32e124a7dc8e17b7785e11b77cd38b3a658a756ec43e61b768d067f1d80294da0bc88d9a036140068a764be8c60293a6074b73fe74522d4e79358a19e9ec877f50a5bcf773eedff482b9361682226ae845ec17b774b17a40d13eed03baa35e819b4c3182f6bc65b97bd6950b35e045b9c4bfdaef88a2fa864d0ad4adc45f9eee583113b3f2fb2c6f4b44eb6202e14e4c5e148f75756c7f18fd75233a302fbffac2d852c43ee375535b585cde2bc5c66a07a4600b51526b51f6904b983334780111b5aabd8d3867bd705203fe37553b39123008479d5e132d24c3c23869520a97629ffbfb2a0dd4e08067d54f02e8e474324d02b84fc192c78a0619d01856774fe98dea29d4d648632ac06d193e7d17f015d917b41124538b8ce41b8e954e944b8d4b980f07d472d0ced2615bc4076935910d256b9d50ef1b297a716b138401d7fd416ef24653dc54c1bc6d59424bc014c2b06be12c237c1c32774def8e38ab5b8b72ae3012c91dfeb4837dc7637afea96384398e403218b1710858d945f8cd882d246214a4817c604d649e85ab25e200377693a1472d1946392309fb6afab64281fdc741c9d2d4ad48edd58a75888a56e42e67d0a6a5fa2a3a51e40aab936bd6da82379256deda6ba8f1e9c434f3698aba2c27ff6245739659e2e63d8f2289d53306c8d5df631dfa609ee6750906d3e61928e57259b9cefc6b58ebbda775e0d54f731a4bdb505996034b768f839bdac66df5a99780c741b041966fb27e647f0b561006d0409f7b660ad1a26a28e65e4c65336f1801f3eab7058cb8e9c32bfb34780e82a74f6bac2cb0dfebda0d0996fbd41c022186857699785bd7665a4e8bf2f5e757477044daf47a442fcac21a7210e601e0736f748085cf1b7455caf8540a71f11e3cf08039a328bdf11edcd99ed4d4a123d767d1cff596d77d877232a532a5f46d078f26229cff6f3a8b1ed4e2fc2e98b53bf34312a5ec35f18f2ed40a26a215b15d8c0b5f7501cf5c1aebf04c3096b571bf35516528757d9fad24d3e2c2bbcedf19fa8eb5beda4545e91edd6fe8e9c37b3e415f7b1a7084d817a4c90196bf6bed2456cf0d2a55c83716826edfe779af7e6c9e47a24f274fe3a9c4fc9cec7c17b237cfe784b2034595"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000200)={r2, r3, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{r3, 0x4, 0x8001, 0xfffffffffffffff7, 0x4000, 0x5, 0x0, 0x15d, 0xffff, 0x20, 0x1ff, 0xffff, 0x627, 0x100000001, 0x2}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:05:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x30) 22:05:45 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000000}, 0x0, 0x40000000, 0x2, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x50, r0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x2ca080) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x7, 0x0, @fd=r5, 0x4, 0x0, 0x800, 0x0, 0x0, {0x0, r6}}, 0x4a4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r7, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)) fallocate(r7, 0x3, 0x0, 0x7fff) writev(r7, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:05:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x40000) 22:05:45 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x8}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x10}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:46 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x78, 0xff, 0x1, 0x7fff, 0x7fff, 0x4}, {0x1, 0x4, 0x1, 0x3bd, 0x2, 0xffff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x379d, 0x0, 0x0, 0x0) 22:05:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xd) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:46 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x60) 22:05:46 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x80000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:05:46 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x7e) 22:05:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x1000000) 22:05:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xf) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x321}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:05:46 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x600400}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) [ 2971.958422] audit: type=1326 audit(1771106746.458:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13315 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x0 [ 2972.012181] audit: type=1326 audit(1771106746.513:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13315 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x0 22:06:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:00 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r0, 0x3, 0xfffffffffffffc01, 0xe5) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) syz_io_uring_submit(r2, r7, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x3}, 0x101) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xd8ad, 0x9, 0x1, 0xf794, 0x8000}) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) write$P9_RREADDIR(r1, &(0x7f0000000080)={0x11c, 0x29, 0x1, {0xffff8bf9, [{{0x8, 0x40, 0x6}, 0x22, 0x8, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8cd9, 0xff, 0x7, './file0'}, {{0x4, 0x0, 0x8}, 0x6, 0x1e, 0x7, './file0'}, {{0x80, 0x3, 0x5}, 0x7879, 0x1, 0x1, '.'}, {{0x10, 0x1, 0x2}, 0x2, 0xf0, 0x7, './file0'}, {{0x1, 0x2, 0x8}, 0x9a0, 0x4, 0x7, './file0'}, {{0xb7, 0x3, 0x5}, 0xffffffff, 0x25, 0x7, './file0'}, {{0x10, 0x1}, 0x2, 0x0, 0x7, './file0'}, {{0x0, 0x1, 0x4}, 0xffff, 0x90, 0x7, './file0'}]}}, 0x11c) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:00 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x2000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:00 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x2000) 22:06:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:00 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x800000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:00 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x2000000) 22:06:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:00 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x3000) 22:06:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x11) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:00 executing program 1: pkey_alloc(0x0, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xffffffff, 0x0, 0xffff}) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x4, 0x8, 0xffff, 0x7}) 22:06:00 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}) prlimit64(r2, 0xf, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x8, 0x0, 0x0, 0x1f, 0x0, 0x5, 0x22004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x8, 0x9aa}, 0x41010, 0xffffffffffffffff, 0x1, 0x9, 0x1, 0xcad, 0x80, 0x0, 0xffff, 0x0, 0x6}, r2, 0xd, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x3) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:00 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x2103}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:00 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x1000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:17 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_mr_vif\x00') tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:17 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x3000000) 22:06:17 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x4000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:17 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x4000) 22:06:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="0100dfff000000000a6f832c7471c5702aa818008000", @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) fallocate(r1, 0x3, 0x4, 0x7ffc) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x13) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:17 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x2000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:17 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x6000) 22:06:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x15) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)=""/123, 0x7b) fallocate(r0, 0x66, 0x6, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x23) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4000000) 22:06:28 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x7e00) 22:06:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:28 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x80000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:28 executing program 2: r0 = syz_io_uring_setup(0x2a66, &(0x7f00000001c0)={0x0, 0x8ccf, 0x20}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x9) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:28 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x2010000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x27b) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:28 executing program 1: r0 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x134c85e8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="7d43d96d849af7f9285b7e4cfc340411cd0249ee1d24c04d368d948851133f4327d17db507e773b61dfad3c026b4b80d1b982985f6e37e6c374baa98324cf9aab197622502f71a0f40ea152cc5fd538263d285943821a9576da1ac56b9fee19351fbda2cd8e7fd64f7dbc4eb3978e1f987d8ba38038ea5f676bd42b2194fc0c07144187db62c7229bfca0b5fdd7acf7808f88b6ad407b30c25c704c94138d7827c7b4d1d05569668d824ceaa38e3", 0xae, 0x9}], 0x4020, &(0x7f0000000200)={[{'\x00'}, {'\x00'}, {}, {'/#+^:'}, {'\x00'}], [{@uid_gt={'uid>', 0xee01}}]}) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:28 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x200000) 22:06:28 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x3000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:28 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x1000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3013.823035] 9pnet: Insufficient options for proto=fd [ 3013.831677] loop1: detected capacity change from 0 to 135266304 22:06:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x5000000) [ 3013.870246] loop1: detected capacity change from 0 to 135266304 22:06:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x27c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:28 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000280)='./file0\x00', 0x182, 0x88100, 0x12345, {0x0, r5}}, 0x7fff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r6, 0x3, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r8, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000000)) fallocate(r8, 0x3, 0x0, 0x7fff) writev(r8, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r9, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3013.931275] 9pnet: Insufficient options for proto=fd 22:06:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x81, 0x9, 0x80, 0x7, 0x8afca4c284f7e106, 0x6, 0x2, 0x1e1, 0x40, 0x10b, 0x8, 0x4, 0x38, 0x2, 0x801, 0x8, 0x5}, [{0xc8f73d441017b294, 0x9, 0x2, 0x3f, 0x101, 0xb3fa, 0x35f, 0x80}, {0x4, 0x7f, 0x2, 0x1c13d70f, 0x6, 0x1000, 0x401, 0xfa}], "18675d33e1eab22cdaeadcf034ee086210ccb62809b76474924706408d0db9416b612647b7cebd994c277fc60452ab603e037241575fc9efac39a2adcd440a1c5379c67d50912fb2e1b97f478920ee8ae7fe3244b1da48c3713dbf6e249f69ea4e0f9b924ee407b34f528ff91d423e99682d47b60a057d8f076a015b5f0113e2f55acd66d6b98b28eda7ffae410f127fef86e8ddf1f00ab1d4b7cd2b3246651af7a91a9427f934ef2d4396ad26cd511592"}, 0x161) fallocate(r0, 0x63, 0x0, 0x7fff) syz_io_uring_setup(0x3cd4, &(0x7f0000000400)={0x0, 0xd4b2, 0x8, 0x8, 0x1f2, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) [ 3028.528905] 9pnet: Insufficient options for proto=fd 22:06:43 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x4000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:43 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x4000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x6000000) 22:06:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x281) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x1000000) 22:06:43 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x46f2, 0x10, 0x0, 0x150}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(r2, r2, 0x6, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fsync(0xffffffffffffffff) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x2e, 0xfffffffffffffffd, 0x3) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:43 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x20000000) 22:06:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x300) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x10000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 22:06:43 executing program 2: r0 = syz_io_uring_setup(0x3871, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r2 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x10000000) r5 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, r4, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r6, 0x7, 0xa) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r8, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000000)) fallocate(r8, 0x3, 0x0, 0x7fff) writev(r8, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x4820000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:43 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x20000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7000000) 22:06:43 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x30000000) 22:06:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x500) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x40000000) 22:06:43 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x21030000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) tee(r3, r2, 0x3, 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="08000000016d0000000400"], &(0x7f0000000140), 0xad23a191678732f0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x6d20}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x77) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x3000000) 22:06:56 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x60000000) 22:06:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:06:56 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x8000000) 22:06:56 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x40000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x1) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:06:56 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_enter(r0, 0x6263, 0xaa6b, 0x1, &(0x7f0000000280)={[0x5]}, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:06:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x107b) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:06:56 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x5000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:06:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1100) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:11 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x9020000) 22:07:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x7e000000) 22:07:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:11 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x5820000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1163) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:11 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfbffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:11 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x3, 0x2, 0x0, 0x4307, 0x22, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3e, 0xc}, 0x0, 0x40000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="9a6112bfd06fcb1e4b7683170a804d8f01cb6c14b1dc33bd3fcf748c5d09f0161aa6650118f6407c09bd67714ce6ba6d4e3f7ee4df51d646f41e026919a0eddc69e5e65d31e7f2f0dc2b53b1c5c30c90b9805df1b34f07d83089f9c83cb26b47abb66576233d7a0f8774b5c03a5f9a46531b04", 0x73, 0x20000000}, 0x4ae41259) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x4}) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:07:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1164) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xf0ffffff) 22:07:12 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x6000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:24 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000000)) syz_io_uring_setup(0x7f3a, &(0x7f0000000300)={0x0, 0x2737, 0x1, 0x3, 0x1ba}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x37, 0xb11e, 0x1ff, 0x20, 0xfffffffc}) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x842, 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x48) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:07:24 executing program 4: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:24 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x8000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1f00) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfffffff0) 22:07:24 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xa000000) 22:07:24 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfdfdffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = dup(r1) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4007, @fd=r3, 0x3, 0x0, 0x0, 0x10, 0x0, {0x2}}, 0x101) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:07:24 executing program 4: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x60) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:07:25 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x358}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:07:25 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x81, 0xb4044) write$binfmt_elf64(r6, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0x3, 0x1, 0xfffffffeffffffff, 0x2, 0x3e, 0x1, 0x30a, 0x40, 0xc0, 0x1000, 0x3, 0x38, 0x1, 0x7, 0x0, 0x200}, [{0x3, 0x9, 0xa684, 0xffffffffffff0001, 0x9, 0x7, 0x0, 0xf2e}, {0x60000005, 0x8, 0x6, 0x2, 0xffffffff, 0x100, 0x0, 0x79f2}], "b3fced87d73b02743b4fc1ce4b67f515a7f6a4da512235db345615706bffd4cd488ca81da7d016216ccb69da0934107d54a3c035fa87072db8cafe810c1e9785773eee831f6154399142694c982b963fec1b18fda7e8785d46bbedbf3c4f0d9d292fecf87607f292347f3bba5d2dd180d6a662204042f3854fb82e9b7cc9a7e4389bd8965bbd5dac5bd116c3e283e5fa2af48f831fd20dbc3de608a12f5f41a01c6f7f885196522e097f9f35b1114523517a27343bc5a616df0d8fae8880c0b4743a6a5fe5bc8b90ecdb935338d2b40c249472b052e83b3282707bdb58f5e6e1d5adbd04865b1e03", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb98) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:25 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x9000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:25 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfeffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4100) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:25 executing program 4: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = accept4$inet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x73, 0xc0800) r2 = dup3(r0, r0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="f833263b6330c8827cd6be05eef03c80cc160657f70a2a0657a8487c468d1a828f2689b57bc811c49bbef0c56a55039fda95ad92d2ece6ee245577f9af019672735f475507e34f75616b3bea6a2ef39c81731d6a53d9218d767c62a62b390179c7364827d728ed9668337218c6ac08b9848348d74a1546eeb6fb4c4e89245569d583c1206025d19ec35b369a414b3056235e58145978af86014206e5ef41aa7e84b07d1496c72eaccf043dbbdae7b3e387f507", 0xb3, 0x15, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x1, 0xffffff80, 0x0, 0x0, 0xfffffffe}) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000000080), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5a3c983d260b5a75, 0x81) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000200)=0xffff) pwritev(r3, &(0x7f0000000800)=[{&(0x7f0000000180)="5acc4284e23d2696c68a71ba3ceeffecf5077e7ff27f2e47bd60a2f73f6b79bb1a196ac7c78c3f7928194f0bfcd5603437e3a61f2ae622b6129d4ba9def72902d3b925a67722f0c8d52ef2ea87ab5bb688c71f1fd74460fb5e198c53d42818e97353b65fdc", 0x65}, {&(0x7f0000000480)="fb04682163be41dc5d2e67520023e25858dca706d3dce0ebb48912025358f8637f4fea6a97b87d2c7fdea9756f236e5b85d80a1d3892f2bcf4f3a73e4352405807d532fe9e8c7cfe", 0x48}, {&(0x7f0000000500)="2714ecbc7653b25c10a4a32cc2692f8ed10f17ac3f81dff8cc64a21a8deec83c6b6c5c90ea5ded14cd7e203fa96a854c80ae6ff34f14391c0745694f314114fc0a5a228b91451421d883ac93ec3f6a87f39ea6269c00053958f9c7a621ab45ad1349108842fa2d2f266fd98c773ab6988d2ad071011db16a07369b35cf5803e7e2b4e5410be03b20dbb4da72715153f0db7730983cf9b7c08ae951c3c73725b7241b915e298430624d1917898080834ae96919f15d7f43a6b7c0a3b8d31b770fd8f49c33f7698c162905a937db97b3a2e2c1f24d8ce151b0ec40cd78", 0xdc}, {&(0x7f0000000600)="95451305af4a57dae8d5ed382c9fe9d91294bbef9e73668736e5881995ff4f9a2eab60ddff0620495ea29484e89c71bfae3ae3333c96dbcaab1175f21b9c27d3b623f732229b7a2d3badc2f8e2dc2f2c9bb3e9b70d8a9c85d6b6813245996d270e4981d85b520223ced276e1cd282eb811281404d3eaac903126897e62a75cd5d2c510a56f3cccb76b2477e7293d6e4c49b3fbc61615e493e3a9b83c54f5284c745624bc27e78edc7499bb3bd71840521c755e2a62dcebdca2ec48", 0xbb}, {&(0x7f00000006c0)="a2705d75c4d1c0a233466c2c3232b71d9479a99962422825b3f6ea9f3c19037f88fe023d689760aebd213be622395fd2ed853ed76534155b10b99813fe65dd6fbf3ed3cdc8e3a95f292dfa8ee469cf4ba900610c6804cd85794ac5708049eeb46608f9ead81bebfd8cf2db0a0ea103095305fa0ac5e926fb0b896bc161d56045cbd8", 0x82}, {&(0x7f0000000780)="c68c957283d07fed55ded02639d6097bf095a1ea6497d266402562bbd9a10bd757129362a7a20e4973ee3a8d1466519cc130622735226c5ff3df7d370adf2614d17b269d09a0d6cab540cbd6eba6e2ddbce5f01cc583cfc792741806aa", 0x5d}], 0x6, 0x1, 0xfffffffd) r4 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x98a02, 0x100) r5 = accept$inet(r0, 0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="8cf573e1f7b81222631e6e6fc42cf76ee1ded2c1c75fd51cc86d6ef287dc0ff711ce77c62ca46c958eb93ab116a0a2cfbb5bfdf3685978c9", @ANYRESHEX=r5, @ANYBLOB=',loose,debug=0x0000000000000005,access=any,smackfstransmute=}^,smackfsdef=$,\x00']) [ 3070.605613] 9pnet: Insufficient options for proto=fd 22:07:25 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x1a000000) 22:07:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x8100) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) fallocate(r0, 0x3, 0x0, 0x7fff) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x6, 0x9}]}, 0xc, 0x1) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:07:37 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x20000000) 22:07:37 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r4, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, r4, 0x10000000) r7 = syz_io_uring_setup(0x103e, &(0x7f0000000300)={0x0, 0x3575, 0x8, 0x2, 0xe4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000380)) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x9, 0x5, {0x0, r7}, 0x81, 0x4, 0x1, {0x0, 0x0, r4}}, 0x6) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:37 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:37 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620f, &(0x7f0000000180)={0x0, 0xf5af, 0x0, 0xfffffffe, 0xb5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x402000, 0x2) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xffffffff, 0x4ca, 0x6}) 22:07:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfdef) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:37 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfffffdfd}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:37 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x9010000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:37 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xffffff7f}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:37 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:38 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0xa, 0x0, 0xff, 0xff, 0xf, 0x1, {0x3, r7}}, 0x7fffffff) tee(0xffffffffffffffff, r3, 0x3, 0x8) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r9, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r9, 0x40086602, &(0x7f0000000000)) fallocate(r9, 0x3, 0x0, 0x7fff) writev(r9, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r10, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1000004) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"}) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x22000000) 22:07:51 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xc000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:51 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000003c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000440)={0x0, 0xfffffffe, 0x2, 0x4, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x30, r0, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0x80, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, 0x80800, 0x1}, 0x98) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r5, 0x3, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r7, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)) fallocate(r7, 0x3, 0x0, 0x7fff) writev(r7, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x4000001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:51 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfffffffb}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0x0, 0x3}) fallocate(r1, 0x3, 0x0, 0x7fff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:07:51 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) setfsgid(0xee01) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000d00)='./file0\x00', 0x0, 0x100) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) setfsgid(0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000017fe0000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000c40), &(0x7f0000000c80), 0x2, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x2300) perf_event_open$cgroup(&(0x7f0000000bc0)={0x4, 0x80, 0x2, 0xff, 0x0, 0xd3, 0x0, 0x2, 0x1, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, @perf_bp={&(0x7f0000000480), 0xb}, 0x144, 0x5, 0x5, 0x4, 0x3f, 0x3675, 0x5, 0x0, 0x6, 0x0, 0x9}, r2, 0x6, r1, 0x1) signalfd(r0, &(0x7f0000000cc0)={[0xea3]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}, {@mmap}, {@posixacl}, {@cache_mmap}, {@cache_none}, {@afid={'afid', 0x3d, 0xfffffffffffffc01}}], [{@obj_type}, {@measure}, {@fowner_eq}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}}) 22:07:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x20000241) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1476e3, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) 22:07:51 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xd000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:07:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x3f000000) 22:07:51 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:07:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:07:51 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x484e0276623537c4, 0x30, r1, 0x10000000) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000007, 0x20010, r2, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffff, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0) 22:08:05 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x40000000) 22:08:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x7ffff000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:05 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:05 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xe000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x125200) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x1056e0, 0x15) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2, 0x1}) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:08:05 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="53e2118482b9c4b9bbcc1138a6c9973f64e7017de29898cfb2104300100000d5ab17c3dc01c6d305417c6c646b138172e5e9635d8e0fab8b26a9e9534403e3bb83b4eeb054e50bbee6b2", @ANYRES16=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f61636c2c000ebb62527e6dce1f000000d0e02d473c674aabbc6c6f0d718323c6e2d1a466027c2c982b89c44cb166e54e53e3"]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) 22:08:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:08:05 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x2cd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:08:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0x8}}, './file0/file0\x00'}) ftruncate(r1, 0x1000004) r2 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0)=0x1) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x81}) fallocate(r0, 0x0, 0x0, 0xfffffffffffffff7) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) [ 3111.251395] loop2: detected capacity change from 0 to 16776704 22:08:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfffffdef) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:05 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4028011) 22:08:05 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) flock(r2, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) openat(r3, &(0x7f0000000000)='./file0\x00', 0x40, 0x2) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:08:05 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x10000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:05 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x48000000) [ 3111.366721] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 3111.366721] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 3111.366721] 22:08:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x400ff40bffc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(&(0x7f0000ff9000/0x7000)=nil, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000140)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendfile(r0, r2, &(0x7f0000000100)=0x80000000, 0x9) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) [ 3111.504696] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,,errors=continue 22:08:06 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x12000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) [ 3111.567283] loop2: detected capacity change from 0 to 16776704 [ 3111.570937] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 3111.570937] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 3111.570937] [ 3111.581625] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,,errors=continue [ 3111.594229] audit: type=1326 audit(1771106886.095:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.600175] audit: type=1326 audit(1771106886.095:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.607878] audit: type=1326 audit(1771106886.106:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.610749] audit: type=1326 audit(1771106886.107:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.616502] audit: type=1326 audit(1771106886.107:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.619370] audit: type=1326 audit(1771106886.108:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.623060] audit: type=1326 audit(1771106886.108:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.627281] audit: type=1326 audit(1771106886.108:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.630608] audit: type=1326 audit(1771106886.116:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 [ 3111.653015] audit: type=1326 audit(1771106886.116:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13953 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdef9b19 code=0x7ffc0000 22:08:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:08:18 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:18 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x20000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:18 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0xfffffffffffffffc, 0x0, 0x0, 0x1b}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:08:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xffff88800dd773a8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4, 0x8}}, './file0\x00'}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x1802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mount$cgroup2(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x100002, &(0x7f00000002c0)={[{@memory_localevents}, {}, {@memory_localevents}, {@memory_localevents}, {}, {@subsystem='hugetlb'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@appraise}, {@fowner_gt={'fowner>', r5}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:08:18 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4c000000) 22:08:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x800001000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x1e8, 0x3c, 0x0, 0x70bd25, 0x25dfdbfb, {0xe}, [@generic="c465f8ba58f7c69c658d2ad08e4c287097cf6fe87dcf292f2485efa924bb689e9730302c662209fbf8660fce42ee71a16f2e4e00298c88bb79a64f73dfa243a37d0c312f2a953dca36d0a3c46a4899f29c62049f6dc737c21ce42d3cf511675d5f394370ceb761b4a81e984368aee37a5b389de3ca7a8da2bf236a983a223206", @nested={0x153, 0x56, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @uid=r1}, @generic="b0d1c7e9196a5af77974d055124f8b758d7234a9830e03be1909431058f9b24e8db65d909e4610ae2b270db7b9feba1fff0832574deae4ebde6102d3831747c747f53a731aaab496adf2a69d2ff51c8fe1859605d37b0bcd44efc1057016b1ad477cc02f48a6ba80aded3d2f9435623b71a6513626e6c848dc95dd2279a519c8ea2c7b7e9e765783fba68bf3c3d4b526c1ca3c1a9827fbba", @typed={0x8, 0x94, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x2}, @generic="f1e6a7573310717e1c381363b2a7fd1cfd10ba263bd312a4483e64aeca96b8519178f905a107aea5fb9546c5866ef3ffae3cda9a20e2978f27c8f3e2339241355262179de3e2744cfe9b9a67899848643e8904fbb93340bc673557a8dd2b1d21f6416fd9e9a967df3703aafb7cd7ff81558f0f59d870ed56113ab29971f168455a64db1c9c4cfbec8539cea3fe399f18e2364c0ad86791"]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x40000c1) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:08:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1404, 0x2b, 0x1, 0x70bd2a, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x50, 0x0, 0x0, @fd=r2}, @generic="522ee6737091c7ce3920b99757137b9913154fac8d88247165aa6b93f4473926429e79768197e6e4cca1", @generic="1512aab105e971941a52846211cbcb9e58c5afde547b81a5fb363267c26543e78460f1f026359a088dbf4538cd906179d88af8f8b98d62e066c10be92030a41b1cc4aa79917abdb504eb5338487f8b0b2ca59dac45d25fd1dfdf5a1b1a13236a22b0f27b8b49a20876eba6d28217ddd25edf", @typed={0x71, 0x62, 0x0, 0x0, @binary="84f4219256db211eedae75eb86e55ee94b9096c3a12f2065d266ddab771d73861e942861cfa011d4c49c817f99d6a9c8e3b0a9c0bfc99af7e31c7be693c48f92478a0857cc484f5ace2664ea7f79db5d777be32f7241ab28cb0607dd2c6d915c93e12d304943feb4ffca411d6f"}, @typed={0x36, 0x1, 0x0, 0x0, @binary="46ed7b4a2fd580c8c7f0bca48417312175e6c61ddd0bd7a7f0b45c0c630d5dd97957d8e35775ebc34d69e490e9181717505b"}, @generic="396eceea044aba7499c561a68e235d034b05041ffb0979fecf72c28cd78352feec860ee012f4", @nested={0x102c, 0x29, 0x0, 0x1, [@generic="d96b4fa6", @typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x7d, 0x0, 0x0, @uid=r3}, @generic="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", @typed={0x14, 0x54, 0x0, 0x0, @ipv6=@private2}]}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@remote}, @nested={0x1c4, 0xa, 0x0, 0x1, [@typed={0x9a, 0x31, 0x0, 0x0, @binary="5ea89935ee2bba272b8dfb87f89c47e8e05a3834417d331f2a9835aa2de37a41c0398e7d2622509ed4856b761e7a7e5b9f17f8b9bd6e4e7549bbb8bf7a3dc57d132c134446085d2937411af95b1ade0806d3cba1356f14ae29efbf7f38f789453df1c4a6ced721b6ea1c6747935769259a4e84ecb4fc9699ad2a81c44c96ddb818b3f7643835cd4affb056f739cbddf4d5e4c510b2dc"}, @generic="4caa9aa44857aeda64ec4ac1efbb1714ba155e657d5d70f6cc87775ceb4a7693b31560453d77086e288b609168d82bccf968d1ad6b77807ebe55d899c89c5e292c52b0c9", @generic="3f6ae1622b1fc8969326917816be5a86726fc52eda14d50e5a90215e124b93ed1db8086e85d0f44147d6323b61d20a375768d2dd3ab8118dd321ddd62b1f1a3152defc135663d60a740e87463ecddfa7e6981897007a45cd454dfc02781854f424f96be0fcb4a43d21cdf1704d78d55c684623fbc685944992aa90b9f9e165d1efe7352949f95a314fe76a720015ce114bf4caaab5bf93952af577a11ac5ed74b19a699fb55cbfb98b41b7ed08264bd7add7b2d97f2844014ef62b5c4e7ad1b9b73d62bbe8ad672d8e433adc86c74fb52634cc4d138f9b0b484f5ca5cd3b6b2b"]}, @nested={0x74, 0x6c, 0x0, 0x1, [@generic="a8dfe2a02ca16cc30eb57dc87ba96b3ecef184a6284b87b1edeade3452fdd5e1b263f1f8dc0c78864f572b57304379be57d293c288b1cf6c780fe1ec9c527ba02db694be79c6a61bfd45320be0b7f1b160561b843bb6d62e7d7a73daa2a681ae3ca4e2c37e069397", @typed={0x8, 0x84, 0x0, 0x0, @u32=0xffff}]}]}, 0x1404}, 0x1, 0x0, 0x0, 0x4040881}, 0x4088050) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:08:32 executing program 2: r0 = syz_io_uring_setup(0x38f4, &(0x7f00000001c0)={0x0, 0x4, 0x10, 0x0, 0x28a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) lsetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', &(0x7f0000000480)='\x00', 0x1, 0x3) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4000, @fd_index=0x5, 0x6, &(0x7f0000000300)=""/235, 0xeb, 0xd, 0x0, {0x0, r7}}, 0x5) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:08:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc}, 0x2) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:08:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0xfffffffffffffdef) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x21030000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:32 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x55000000) 22:08:32 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r7, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000007, 0x50, r7, 0x0) fallocate(r7, 0x3, 0x0, 0x7fff) writev(r7, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_submit(r3, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r7, 0x0, &(0x7f00000002c0)='./file0\x00', 0x1, 0x404400, 0x2468a}, 0x3bf) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}, 0x8) syz_io_uring_setup(0x6e7e, &(0x7f0000000080)={0x0, 0x391a, 0x8, 0x0, 0x12e, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fallocate(0xffffffffffffffff, 0x3, 0x8001, 0x5) 22:08:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x0, 0x1}) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:08:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x9) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) fstatfs(r1, &(0x7f0000000080)=""/105) 22:08:32 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x959703b790c583c0, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x8) fallocate(r0, 0x3, 0x0, 0x7fff) tee(r1, r1, 0x9, 0xe) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)='\'', 0xfffffffffffffedb}, {&(0x7f00000003c0)="2b45492758d4c1d9e955574ae6d34c52bc38ff407554469e51d2ce10b61c3e56b64d8fd743782220099dbf58a2e860e30b8e673c67f6f7577522950137dbd3be67a9837b0c1bc4410000800000000000000000000000000000000000007471bd34502e78bf9ff32c984b3ac85741cc39c6aedc885b156484c8a63df7732f052a0372143a3e48c36c2ecfc3f10aef79c948381d8e5b880e9637bb09ff775ed3907621acec4f370f6e8630130fd10f642a69df6b1f19c2ea9c5cd707e13aae4013989dad7fd94ffe41d62107f6b35a37515797598f82ce2414a717dbc8f9ae3c63ab2b201d8659bf704a4eac510d1d6724bf", 0xf1}, {&(0x7f0000000200)="93da8734a27551ae3212d5a598555ab97cd1b55242908f357482d5aacad62d84bffcdd27c8f2afcd1dc28636a1", 0x2d}], 0x1) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x12, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_setup(0x4bb, &(0x7f0000000080)={0x0, 0x35c8, 0x0, 0x0, 0x31a, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 22:08:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x3f000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x68000000) 22:08:32 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x321}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x108) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:08:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10010, r1, 0x10000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x6c000000) 22:08:47 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x9) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x40000000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x7d, 0xfc, 0xff03}) 22:08:47 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendfile(r2, r3, &(0x7f0000000080), 0xb13) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r7, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14, 0x0, {0x0, r8}}, 0xffff) syz_io_uring_submit(r5, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:08:47 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2103}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) pread64(r1, &(0x7f0000000080)=""/249, 0xf9, 0xfffffffffffff001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) 22:08:47 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x6f7b, &(0x7f0000000300)={0x0, 0xa2d9, 0xc, 0x0, 0x272}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000380)) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f00000003c0)={{r2}, "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"}) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) lseek(r1, 0x2, 0x1) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x17e40) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc440, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xa0050, r3, 0x8000000) 22:08:47 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:08:47 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x7fffefff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:08:47 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x71000000) 22:09:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), 0x4) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:01 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620d, &(0x7f0000000080)={0x0, 0x1, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:01 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x74000000) 22:09:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x8cff, 0x0, @empty, @mcast1, 0x40, 0x7800, 0x20, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="04df00000eff1f970cecb43ee235208533a6e02d3e9a7fbe20dcc8d5776f147da0", @ANYRES16=0x0, @ANYBLOB="00700c98d3460e3db4250b00000068006272696467653000000000000000000014000200736974300000000000000000000000000800010058e13e1dfc6dbbf627f2cd45993f116768f8365ae2866f36bee87f1c1ad8121a9aa38c3a1507b729b39b84bfa9c013202a60652a06b5e9f058a056e89d45abd0515a59bac63b6a1ab5a49c539d3da9be034faafc1ba9e9945725286e2e5d3bcb477331b29e30469e91d8190d596e24a049c25dda4705b4ddd9261424", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f687372000000000800030002000000080001000000080001000000", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYBLOB="424bd5a0473e29d3410a4f4f46cc7e85f7de70b63207ee8f70c489170ba0ba8b09", @ANYBLOB="140002006970766c616e3000000000000000000008000300000000000800030000000000180001801400020076657468305f6d61637674617000000020000180140002006e72300000000000000000000000000008000300010000000c00018008000100", @ANYRES32=r6, @ANYBLOB="200001801400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=r9, @ANYBLOB="140002007465616d5f736c6176655f30000000004400018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100b5c4f44c086b0e58242226d5a4d78d093fa8a5f039bb5732180482c6bf", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000001400020062617461647630000000000000000000"], 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:01 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x0, 0x4}) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:01 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0x81020000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0xa, 0xbe10, 0x4, 0x6, 0x18, 0x1, {0x3}}, 0x35cd) 22:09:02 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x22010, 0xffffffffffffffff, 0x76c9f000) ftruncate(r0, 0x1000004) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x121100, 0x80) openat(r1, &(0x7f0000000180)='./file0\x00', 0x1, 0x111) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}) prlimit64(r2, 0xf, 0x0, &(0x7f0000000400)) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x109c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfc, {0xc}, [@typed={0x8, 0x94, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="d0082b669ccd56bb141b9338cfa520d42f0461885da9f30c0ba53ede9abb1a020391cf5e3305b091dbf3290690f1e9e35c64c6a199aaa1be", @generic="07d6ec0c7d214a", @typed={0x8, 0x18, 0x0, 0x0, @pid=r2}, @typed={0x6, 0x44, 0x0, 0x0, @str='[\x00'}, @nested={0x1028, 0x81, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @binary="a325e470ceab4e57"}, @typed={0x8, 0x8e, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x12, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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"]}, @typed={0x8, 0x50, 0x0, 0x0, @ipv4=@broadcast}]}, 0x109c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:02 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xe4ffffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:02 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x7a000000) 22:09:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x48010) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:02 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_delete(r0) timer_gettime(r0, &(0x7f0000000000)) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x6c562, 0x82) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x10000013}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:02 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xeffdffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:02 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:02 executing program 3: syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) flock(r0, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x840001000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f00000000c0), 0x0) kcmp(0x0, 0x0, 0x1, r1, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/rt_cache\x00') readv(r3, &(0x7f0000000380)=[{&(0x7f0000000600)=""/98, 0x62}], 0x1) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:16 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendfile(r1, r2, &(0x7f0000000000)=0x10001, 0x7fff) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x442a01, 0x40, 0x1}, 0x18) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x22) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:16 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x1, 0x1}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xc0b63cc7) 22:09:16 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xf1ffffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = syz_open_pts(0xffffffffffffffff, 0x28400) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:16 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xf4ffffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:16 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022dbd7000ffdbdf2501000000080002000200000038000c8034000b8008040a000304000008000900de1f872908000a00010e00000800090036805a2a08000a0067b6000008000a0031f60000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x1010, r1, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r1, 0x40a7, 0x1, 0x0, 0x0, 0x0) 22:09:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46ff, &(0x7f0000000180)={0x0, 0x0, 0x22, 0x0, 0x316}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xc73cb6c0) 22:09:16 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xf5ffffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:16 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r1, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0xc0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x674240, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x8, 0x80000001) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r3 = eventfd(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) read(r0, &(0x7f0000000080)=""/99, 0x63) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004801) 22:09:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fallocate(r2, 0x4cca3796cdc17f2b, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fallocate(r1, 0x10, 0x0, 0xffffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:35 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfbffffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) [ 3201.006299] 9pnet: Insufficient options for proto=fd 22:09:35 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x48004}, 0x44800) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x208000, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:35 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x21030000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:35 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xed030000) 22:09:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:35 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000004c0)={0x0, 0xfffffffc, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@nfc={0x27, 0x0, 0x2, 0x6}, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x3}) fallocate(r5, 0x3, 0x0, 0x7fff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r6, r3, &(0x7f0000000280)=0xffff, 0x400) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}, {&(0x7f0000000080)}], 0x3) r7 = syz_io_uring_setup(0x620c, &(0x7f0000000440)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3201.083410] 9pnet: Insufficient options for proto=fd 22:09:35 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfeffffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0xb1}) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newspdinfo={0x44, 0x24, 0x400, 0x70bd26, 0x25dfdbfe, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044844}, 0x50) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:35 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) openat(r2, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x13) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x20000) 22:09:35 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xf8000000) 22:09:35 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3201.157449] 9pnet: Insufficient options for proto=fd 22:09:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xfeffffff) 22:09:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfbffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:46 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) syz_io_uring_setup(0x5e10, &(0x7f0000000300)={0x0, 0xe4f5, 0x0, 0x3, 0x379}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000006c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x3, @fd_index=0x7, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/252, 0xfc}], 0x5, 0x8, 0x1}, 0x800) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:46 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xff010000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x4, 0x40010, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="9f4ec01f75a2dec327fc0d848d3694cbbbce42c912fa27f4341a09490f3a699c66ebd0f007c15ce9dd7cd57c88b44460a85b8679d2f6fcaf24a00536d92925410842a6fd330c2b901d1a45198aceb46f806a0d388d5f1b7e365800452da0f5cbee29ba223659369474dd8d0978a46634f29f5e4844cd28c93c36e9f26eff2c5e48632b9ff030ffee335ed2f09442aebe5f5aadc007c57f267354cd27d9d949d4f4158d8f5d634d4b410e159244a5bed1d384d77a72ec7b7fb375bae8c97d92b88981b8459e29b2316708eb8dbe95bfdfab3ee11660", 0xd5, 0x40, 0x1, {0x0, r3}}, 0x1) 22:09:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="27b382a1addf6d011ee487257defd33c616690f47f35b3cde7b0b9706761cfa4383008be3011e17adfcc01e39ccb731f62cf0d797e909b545abe46e6bdd4d304d497", 0x42}, {&(0x7f0000000100)="24c0afc425c63ef32e9603f0fa4064652e089be0d2174a96cb9ffbd57fb6acab6e289b63586f27298feaff40cbd0f56d5943ef7caafcd2ee6ffa9aca3c979eb78d4f83db35f2d15210ceea3e8677f266f6a09ca33e8673f8dc59f71840f912863ac8f487fcfcf9987ed99ebc991dae7db5cec23348da44e318f0ffa1145c30df09e24d0ac8e22864beebe405ba30d8661237fd18a1da34a86504eb5145b4814b229202a7231a20c4398a9f2d20735232e2eba5835201e592858db30061097bf3974a9389eecbba565610affa39db", 0xce}, {&(0x7f0000000200)="e87f9796e6b73ce6718014959443938d6a507381cb9fe19c0db25b6b", 0x1c}, {&(0x7f0000000240)="325e793420a23160", 0x8}, {&(0x7f0000000280)="d01b94d773e62c9d35f25827655fde9b7b1bed8db0bc8b21c39d05cd6193ceace80a98fc44e3cc8ef18b4014713fbe08e0f5dc1af7e0d2dad29f5fe3bb6bb8e93f0df82d9e4ac75c4a1c292d74e006ef64ad871b352adfa960c1763f9ac9cc2fcdf417b19d9d8a964aec25b38af8b3e1cb52b6990a7ed0b299b396a2db79556cdaa67b5889e2356eb73a3352d2d8cc5bf04038d2d527fa", 0x97}, {&(0x7f0000000340)="a72ed63ecb22b107fc77de0332480bb2cfe4348a59ad9cd039315aeff94053de335c3a5f3397ad86ab810daddf6dfeeace91344d478ec8a3ad774ee4af62e2893b7e3b3bf4ed79b97871ad074d5ae46cd976c8d25e0ab18c528c05e9c49ecadc344e408e7b7ab379", 0x68}, {&(0x7f00000003c0)="852232b6968632f090f97211afe796bb10b29fbd98c166a0e3ef7af0d6da34746d905f2698355c3481a3b667a2d9b265087a5d3d777b53577189b38816a8a901a89a4342336f031cec743fae28ed6de71ec3d4ff01bc7bbf00da51df4a885640f6daa3cf27ff696e30cdbd2a0d587ddfa6386a686236bc7f2af3886182ff6208321a340b09dbc032c5789537ab9be9b2ccd2b119b30d21c1cc73979888def05f25abd5822439", 0xa6}], 0x7) 22:09:46 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x1a62, &(0x7f0000000080)={0x0, 0xbb48, 0x10, 0x0, 0x387, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000240)) 22:09:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}, 0x100) 22:09:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xfffffffe) 22:09:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)=0x1000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055000000080001006f00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900010800000000be2d7ebbcea4155dc76974d538da47831b92ed6500"/46], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r4, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x80) 22:09:46 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r5, 0xf942000) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfdfdffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:46 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r2, 0x8000000) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x9fb, 0x7, 0x1, {0x0, 0x0, r0}}, 0xff04) syz_io_uring_submit(r3, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:47 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xff0f0000}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) preadv2(r1, &(0x7f0000000080), 0x0, 0xffffff80, 0x0, 0x12) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:47 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfeffffff}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x4}) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x3, 0xfffffffffffffffe, 0x6) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:09:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:09:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x1000000000000) 22:09:59 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffdfd}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:09:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000010000001800000070443796181e4d2b68d1cd32cb3952dd6499f5875e937af2b9573e01192723c0b506a5798e20d6caabbc90263999a7ece95a0ddeeadd59723494a3cbd5326f1ad1decccd77542fbe033a1b5815e9a440f9c5c282f0153ccf6c5204719e3a8f46bbd68d7daf2e5b7adfb001637bb5e2cfafd699", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x200}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4010, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006, 0x10010, r5, 0x8000000) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:09:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r3 = semget(0x2, 0x0, 0x186) r4 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r4, r2, r5, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) fchownat(r1, &(0x7f0000000080)='./file0\x00', 0x0, r2, 0x100) 22:09:59 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xffefff7f}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:09:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)="b7f9d4cb637e1ae3470eb3e6f29ec45c303da8b742f95035d3535b1ef0beb8f27b1cf6ae33032c40d0be77e677c9dbf98fc5c9d737db907bd0be8fbf271a4d5c6e4831071c1f2bab1459892458293617d24d3c08cc7c65977e4b9fc8fe4ac4416066bb153f2bc02cd87f76d9bf8de4884c80c916b6a4da5e4a472e12d8deb33f2f7fa820ecdbbeae840f6c5158e068628632c6f981d340115d0c2321ad3435b5a6627aa7f5bcfbacf4c2c514e691ce6061f571cfaaedd3ba3b36e58275c8be59639696279b16546b2ef57ee05b815cd6e3275c475fb090ac34bee5ab6b2f93eaa104c928737382580f63") 22:09:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:00 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffff7f}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:10:00 executing program 7: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x3f, 0x800, 0x1}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x100000000, 0x7fff) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000015c0)={0x392e, 0x1, {0xffffffffffffffff, 0x0, 0x7, 0x1, 0x2}, 0xffff}) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000180)=""/44, 0x2c}, {&(0x7f0000001280)=""/237, 0xed}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000001380)=""/17, 0x11}], 0x6, 0x9e, 0xfffff937) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/152, 0x98}, {&(0x7f0000001500)=""/104, 0x68}], 0x2) 22:10:00 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0xffffe262) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r4, 0x3, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r6, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) fallocate(r6, 0x3, 0x0, 0x7fff) writev(r6, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:15 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) syz_io_uring_submit(r1, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4864c1676a178b33, 0x0, 0x5, 0x3, &(0x7f0000000280)="0df5ddaf8b7ac9fc6a251383acb5fe6fc5e7dd560b37e6619059d361c8d0816c", 0x2, 0x0, 0x1, {0x1}}, 0xffff4f64) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ftruncate(r1, 0x1000002) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:10:15 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:10:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x4000000000000) 22:10:15 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xffefffff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:10:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:15 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffb}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) statx(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x20, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0xf68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_PMSR_ATTR_PEERS={0x284, 0x5, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x90}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe14e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x7d0, 0x5, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x359e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x4c8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x202}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x58}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2e}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe35}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa956}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x801}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4f4, 0x5, 0x0, 0x1, [{0x324, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xbe7a772d97562cf6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2400}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff286}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffe00}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}]}]}]}, 0xf68}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x900, 0x800, 0x8, 0x7fff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x42cee2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:10:15 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) creat(&(0x7f0000000080)='./file0\x00', 0x26) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x144) 22:10:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xffffefff}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:10:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) fallocate(r1, 0x33, 0x7fffffff, 0x12c8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') syz_io_uring_setup(0x63c8, &(0x7f00000000c0)={0x0, 0x9f4, 0x20, 0x1, 0xf7, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 22:10:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0xffffffffffffffff, 0x80, 0xff, 0xfe, 0x0, 0x0, 0x0, 0x4307, 0x80060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x1, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5) ftruncate(r1, 0x1000004) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x4, 0x10, 0x5, 0x1c, 0xa, 0x1ff, 0x6, 0x167, 0x1}}) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x0, 0x3, 0x12}) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:10:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x100000000000000) 22:10:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x10000000) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x40a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) 22:10:32 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) [ 3258.045503] 9pnet: Insufficient options for proto=fd 22:10:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)="58c9ba5803595780a87b69ae94eb3d3ff29cd02cbdd9b508354805370d2a8f2b10bfc8f8def215c0c2430e14b70c819b7e66e0a024e960179bfe7a0089098d9cc4c0dec0b342eb31e881c30e752cbc0b131c6341186339bfab58bd425f1a6be20b500b3e78e29bbda26a6f62ba4c2f0ee16b6c73cbb03268cadcd5980ee5af83ca08bec8a53b748ae6f7fbd545bd718e82d3a0e6c4c7c94f5153c4", 0x9b}, {&(0x7f0000000440)="f1d68327b75164ba2cac5c3a6180e2b1ff2d8b32321cd570be1967ae75d5b9cd3245286b912c5526c88a81f621d4a06bba5bb41709eafe6c43", 0x39}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="6ebe3cdb9a432077271330265b4ec7089f804953528035188746d121f670dd1aaa15943e69a09897099a1205b37b9d0b0361d5126ee203682cfd29167db9438da57398dad27cc0fc0290866b08b2cbdbb643f5937079188df902075c69431f4272f6e38bdedfe4fba9157e47b219ef74a59fb46bdb6525909928b036eb0a5de369d2f18525f5b80adaab0b9c063cdb3052f76db687ba6d18408013cbd4733f3b591d058e", 0xa4}, {&(0x7f0000001540)}], 0x5}, 0x0, 0x40900, 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x0, 0x7fff) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000340)={0xffff, 0x0, &(0x7f0000000300)=[r6]}, 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r4, &(0x7f0000000000)=0x80, &(0x7f0000000080), 0x0, 0x40800}, 0x1) 22:10:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11f7e2, 0x0) ftruncate(r0, 0x1000024) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:10:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfffffdef}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:10:32 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:32 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/21, 0x15, 0xfffffffffffffff8) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3258.176081] 9pnet: Insufficient options for proto=fd 22:10:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) creat(&(0x7f0000000080)='./file0\x00', 0xd) r1 = open(&(0x7f0000000880)='./file0\x00', 0x200, 0x28) openat(r1, &(0x7f00000008c0)='./file0\x00', 0x140000, 0x20) fallocate(r0, 0x3, 0x0, 0x7fff) r2 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x7fff, 0x6, &(0x7f0000000600)=[{&(0x7f0000000140)="7a3b49ac9ffc83caaa05e2947db03b10ce0f091be037663656f2a37d15f7631ca722795845da7ac3a6020ca7691c82f78ce455ad06598561c47c0e763d20726539a3e684c0c30ea61c035084cf2bf465af7c3ef401e84bb92e56b62aae9fdcc80a994c65d095fdc64794f8c49679a426deba0706af8e46b46b8f09c6943671b70c078379f5fe529268b3cbd34e3cfb5e2a5d854db626eeb8800187b69c5ddb271f295a827b423d28d82fca2f30a0d22eb05e8e14c569119ccb7f93cc1cdda01e7d5e93e3", 0xc4}, {&(0x7f0000000280)="f69b81d6e6b5966593679c542f48b63a1475f0e8d60e41d90faf1ec9b9537d3f277a2c3cb1f45a1438d25b19447235d985e6bacc69ca8dc349900959930cb62e9a8021a2e644ba20a916787391c95c20d0a454afb0fca817a13066ab33270f82e1672e28fb3980500d593292ed09371fa95bd2e9a3f9ae1942be0146810b1306bc56bbdd9bf52c37d423fbea1a6f3ad80387462c1df711dda72626a5", 0x9c}, {&(0x7f0000000340)="cc681aec4aefd48dcd30f8fef6878ac46f737a64a9bc64922378505153dcbd7342769a42b2806661e8c3c4ff4d7e63cfe7e8aa5a3c760a648f95bd5bb09f3c0ec1b94be55201d680b4231a", 0x4b, 0x9}, {&(0x7f00000003c0)="dee39ae4afb6fb5d9fe0bd21a3ef7803fe571c5ed4433d61368c0519504ddbeb0656cba77064296f55e5ffa3013c9a9fa8514095096f", 0x36, 0x3}, {&(0x7f0000000400)="4904ec90214dd8081fcba5b01a446d9c9fd553a8e708e34068462af507d99160a1d3ece8fe6400c57fd804269f4fe593c43218859b8a6c037e18c623e2c352e17117ef6e22f822eb5589cabbb3e8d525396a1f4c28762939438139162df3867f58d63ed8d6d0a7c6951f52cf55b4c357fa2d012cbdde8d5dfb63031dbc4d94058d6d46c060c7c5b27a90d9d7621a797f16a8c52080bd2e1e280e31ef8e71c542f71728fb5a05c12783653848942b42e3134b25dcac42882f39bb45c06cfa8c6847a80d1e1c7a50", 0xc7, 0x9}, {&(0x7f0000000500)="0c266f61a73d8d72e0991a45052433172fd8b0f7fc7cf3566ef03df7093485c801787baa6039bc7dba60f065b026f143dbcb2066f52223937ebee29f0623c7a29b8e77a79301558a5e75d49f5e71cdf8e58c1afe6837b8b223bb87d3e2219089af771638397f4f9bb9300d3513189c8f37bba2060b2835b9542556fc57ee9d0eff03d5cc2b28417e12675e8a6250a16eb43ef0c62e69dc32d0bd46f9b0d4974e966dc412f7e8ef4e443890f13f2273aa647453a245a25c2489c1850be5e484ea76903f0dbe5319925ab2bcb2b0823334", 0xd0, 0x8c}], 0x0, &(0x7f00000006c0)={[{@session={'session', 0x3d, 0x17}}, {@sbsector={'sbsector', 0x3d, 0xffffffff}}, {@unhide}, {@block}, {@sbsector={'sbsector', 0x3d, 0x4}}, {@block}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x31, 0x63, 0xff, 0x1, 0x61, 0x61, 0x66], 0x2d, [0x62, 0x65, 0x8, 0x66], 0x2d, [0x31, 0x0, 0x64, 0x66], 0x2d, [0x65, 0x33, 0x33, 0x36], 0x2d, [0x64, 0x32, 0x64, 0x34, 0x36, 0x38, 0x30, 0x37]}}}, {@euid_gt}]}) openat(r2, &(0x7f0000000840)='./file0\x00', 0x400040, 0xec) r3 = gettid() rt_sigqueueinfo(r3, 0x2, &(0x7f0000000000)={0x0, 0x101, 0x81}) prlimit64(r3, 0xf, 0x0, &(0x7f0000000400)) syz_open_procfs(r3, &(0x7f0000000900)='mountstats\x00') writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) 22:10:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x88) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) writev(r1, &(0x7f0000000140), 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x200000000000000) [ 3258.288985] 9pnet: Insufficient options for proto=fd 22:10:32 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xffffffe4}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) [ 3258.348466] loop1: detected capacity change from 0 to 32256 22:10:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000240)="a522c3345e6d1db7acb8711d9e3724fc896844cbb979470f298f5bd366fde98ca734f4118dd1c6f5a3853e29a80ad6abaf22f6413ff2a753c74e4aa86318e79784279a9f4d5ddd1e9bea7c4f329bb88120055804092f1bfb83b6c2811f5d673df4c4139f1ad225ee3c79b5d0c4c434fff10ad6e296697eb38b27beeefa3ecd1c8db5135ba719b0dfe97e749bfe73991c2702a57e1570bad3f0d089a10ebadecb454ded777c907b9d91eee40698c974fc1616ca6a28f66c196c783d4a9395e5c6d9741dd8f94944df9a824c9ba730fb62a214d4da6ea17ea8a4417b452954547c5815bb820e6ece93", 0xe8, 0x80000000) [ 3258.396312] loop1: detected capacity change from 0 to 32256 22:10:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x4000000}) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x0, 0x7fff) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000005c0)={0x2, [0x0, 0x0]}) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="12019ef5223ff9b37dd981a39d590a8e622ee9633ec310c260d21b6030ae5faee652c1eb6d96ccebe5cfc53fe97916b5626a637cdd81745450b84c63d41fc4d73bc7cd78239dcf07c7e38d0e522f45245f8c8534ce6891bdebb64727c1d012ad2632f7c95090c4c46b8f3a16428fdcc223eadb8e088b9eac33ffcac87677fb48448249fb5e9335f94e0289b7dd26f735cef84f1e7660b6cfb2c4284174fea1957c6ecb3d28196d8a156b9f0df5af0712627d2da1bfb3016643e9ef30c568b3beeddf1388b4e0f0deedadfdaa558992b24a14b70bc74dd42821557cfc", 0xdc}, {&(0x7f0000000180)="1f57d74b2c86eeb072e5e18b1ea21c8b8533198e66ec2903009dfc0eb17dd69a6f6c7b4f002daf1812c71bec66428a97faf82febcc8b92587a9620c003eaaf30aaa82826e4dc2868cc5520cdcc16d2fa7ec1b4b2492210812ac8be7623bb4f00ba9561c8e839ebe559f0e4571d583bbf9da2f7b52efe0c32ca18b11fb8c52d177b9fa45f2a7ea535cb182977822479980df787f5c8", 0x95}, {&(0x7f0000000280)="8285b4398509d0fe1ddc681adcb8052c33f87b935b69bc300f81c4f0fe55ea4c5726321b57600037516f978bab46d3c4047601e9cf149f7de9737150e050d00ccda9578163986fbac680b74091395b461a4197c8d56a4ca8dd1869f1215877f0af07a7e39b195f092e5f8177bd630ed05c0de7a562c3ab75df6f80c4203ec9100041e7791de3c91675136920ddbafd0b6a02", 0x92}, {&(0x7f0000000340)="1a86f86a5742ab4c0f9acc26a9dda2f2a3cc4259c8b96ee9ec793cc5df55bc3e08a81e2b7f0082ce4e53690970ccadffd836f77f88635c7d467e99131e", 0x3d}, {&(0x7f0000000380)="b81aa1cf32191eb922b6887da767c4864dd117d29e40edd76df8bfafa49955bd12d0bb79aa89089eee8f67959d3489a73083287f60b973625f7a3278514af422ff2085608740e4f85d2d597deb44de677b2d936bd64e3c139b24f1143ab4406e87a62496def5cb5a13d891afbbbd28aaa0264da41b", 0x75}, {&(0x7f0000000400)="711495775de36dc4f27431ddb05b46481cd7077a1a0c603e4c6694ec60616450b48d703eb1915ec0c11194d726afa0ee1e19dd8321362819606540f24d3bbeed3aac53266ce1f56fcceadc78f3400be090bb644f54f1ddfea6ce45e6496aca5f2d0079b9d4a687f77b357f8d6e80c53636c1a25d1a5c52a08e9dc77503cb2d09bcfec64eebfceb501c64bc2a9816c948a7497f370f2d28954b528a0e4b821a4b68", 0xa1}, {&(0x7f00000004c0)="9994cd0711e5cc0f028a0c796ac67356cf649d3f6c427a64a2d06de5c7565bbcb56a00a07a2b02ea3312029673e0a5fa36c76eaf72ffda1bc250281ee343864962426237a23bcb36638b7d3b20cdef09", 0x50}], 0x7, 0x2) 22:10:46 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:46 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2636, &(0x7f0000000240)={0x0, 0xa4df, 0x8, 0x1, 0x2ff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2a2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x110, r4, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r5, 0x1f, 0x0, 0x8458}, 0x2) 22:10:46 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfffffff1}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:10:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x300000000000000) [ 3271.954241] 9pnet: Insufficient options for proto=fd 22:10:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:46 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfffffff4}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:10:46 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x00', 0x5, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="0bbd735457b8d95c2852651b63d7f86dc47c906b4bd15de7682bcd9d090438e3203d3394591c1425a0c67d329e254651a47f5f43379bcd7c3c8201357da747f4e4438d58b72f25d0e5ab4cc65a05a07ecd9e765ee6fb7b6ebdbf5fb0b0366f205df606014d86d03167876e1d9520fde14477c0e4978deb17968bd873021a84fcf53832bcbb15a3e5395f4ecef3dc05868d1275b90a2b482a16d22fd9f03e21fa4d9170ff4396b6aaa5577d3273d7bb6da2a667c3febbda4fb87d65d3d301b4183f63ef431e0ae6a035c65768", 0xcc, 0x3}, {&(0x7f0000000200)="567d14b1f78c8ed48348b4aef7d95c401013288eff99f956c9dd678cc8", 0x1d, 0x3}, {&(0x7f0000000280)="140d0d087a31c1c9097da1363b88d113b1c4ca9951a91a3a7f9cd9c32ea12974756ab84a51d363f4309737b4fadaf7c638583373a868db46", 0x38, 0x5}, {&(0x7f00000002c0)="5178e3f2e4c71845cff602f3a438f77e690b6c71b5cae6b8ea2e585b777661f0e2833b52628612cb2dba4ba5d2caef387d6913923655a1bb13a73f1ff6ad314f11e09efa6f6ea8e80a50366df74d6fddb4f38a0099e8a44d13444289526153347ac41dfb4b23e6023bdcad4f2ed65305e3ab8106be", 0x75, 0x9}], 0x91800, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_win95}, {@nonumtail}], [{@hash}]}) pwritev(r1, &(0x7f00000016c0)=[{&(0x7f0000000400)="d5efd4463d95ffe9a120b472099f1eeb0977384d18b809e709ae07dcf6dd7186af672b8df0f3f750f6578f11a1771b243f3c346f3f3eb91e1be9a47b747d46417b4ea11168261f0ef8e42de1fd898052e97bfc8e231223a7663a5dbf8dcb7181dae0cc10652caebaca6295ac12eb362102728b191cbe643f26c6b201d678c643570a04fc6e54e74ef066e3bb7d85f5eccbafcf2e3a4c0bd5a16ec65d0b38f137db101d9c4c20e694e0303f5ad99e34e573b44fc94675b2a71c2c0e93ef39afcf96b02ee93d59f0758c351690ec41f887cfe10a90790560706ac2a5298680097a24ae15d1ce74a06be0b76f862834cdb99b895d47711648426087d38a4dab27742fd65c852856605e1d4bf5f6fc6397685191abe9e922ce5e376f139078902d3160c281649643cedc17e29f46fdf02b03f6aeabc1439b994fcd29ca66cc0e1ac28c023bf0498ef63783efbda62f8dbca930bf6cacf7095be566612a05f8adf427703ff9103f1a9eb17bea83116e85a4cec2ebf3f49f64c6a7109440fd38da39dfd5f2270f5130cb7147a0f873cae0f568799292d5102018b2e8410ffef6fc22cfaff951f8a2b0b7c31ff24229523ccf29ebd6eb15638578190888981ba011ae61352f86c41bbe58a58ce4455363e53ca273cfa8ad5249c6622a561bcf7b1b9953ff4543fa73fc41b3d3f1d5715641cbae4def9d4e4f388733a136582b9ad074ecaf49bbad5951b542b2ce30bb949de2946c7d463a391be161f806f0420a41a520bab2e5e064ad40c9a95b5516cc553d7c603616874741c4d59b689ab2b6c185b313b64f8fa2fe8d038c37799549ca7d0c8784407ab91dd4ce2a606823475fab91990505a941f6f2fc061ad334a51798fe9fa88d12c94902a76083c779efe00b5435ed78e4e897b5bdffa0a5e17454fe781b0a61664e0b4ee75aec1b6df0112271b61ba4fbfc2f2e119715230d88764f0b4aab88740ac5571efe7db2cff5c3bea90ab8e75041113f437c9e35aa06d632b1d4c048a3827ffe7e6b3ee51bcc2a2993ad78cb16013a98b6c80e12985571076503ce747e477ed1e222994ee0a94878a7bf6a8cea6e35cd6764e19031c9cfb5e7a0ff1301220bf9d16ec1621ff5446d79459a6684942a916d960f96dc8303c97502c5425ee5c51eab8c4f84dc97d5d0622b7607e5fbe8ada58c0aefc3e7847b213d71fdc0a6ea41ed8a5fc1c641703eade3e40968d01a7bf11a1f576487dec7fd2345efeecc10552a6c1aab4cc4d248f8c1200c235597251a8affc9c5691ae30103e1afbb7f81e683e6ca0672ef8e168b7a57faabf54543d2d717924bfaadbb533123c79b0558159572c21b1bba7c9ebf4b44bcc88fa977d308818f205499928094fdac87b508b950d7bd9b6d843fb508a3fbd09ad34ef1461f64b2b0fcc292a226404ddc361aed81f7d80d08957740b75e54c7172efe41f1d464c3a01d7972647eaa7fef6fe74fd5f0fcfd31427830ea1627c32fc07bb085b6b414c50532e7e048ed47b9ce5b8cbcc4b2df12f81c57c9bb45c0b65b2679f19c61c0db1d63831d51c8c4571d831b4fdce53689935b702b6bf91e56125b2cf4bbba1b56642404aa2a2a1f4384b27b74f80a6162a62cfe82af0825539c0cdaff85c23177a1024fa82fd7a85465196dc08224b28086efcef7b7527051ba0d8472ba605f4f3c6d9b9d10bad1b4c8c9146d323f3bd9aaa63f555836cd0992f7541bb046f6c032537a3d68d85685119150d856cffa7e0060edc86e0de2951e6ac6b8f07d9e10c283b7d11205621fa522354b323ad1a3c11e3449beca3c4a0b652b84961ae5957fe4838b63e7c8d1dd851c406e8733b864db237c1c65fbc100af2acb7325a70307752904ab5fca46aebff91cc39bd0e1f02ec69459140449f3661154cbd74b348300815a9730c308342d099b8aeb426a24960b4387ddb3338cebeb80316d16ff584842112a7efa40620c2d9bb51ed9119ad29d4a4591aeb36d162012838fe6e5656fa20147f2670b19bbb7664e0a9ec84c71647a1f37bda43c13bffacb71e7990402110c68b513173cfbfa0fd27b26a1bf7b1a7e821923a2ce44bb2e8d8aa4c3b871a3629a4725991ae721c1365b92bb927b4b3c5e75fcab1d36abdad720946499e461f0a91ec9621604edad82f6ef8e9ed80f32290cb15865e9f40c63c585cb507c71656c866641a220fa9e46b236a0121ea3cecf1faf577a545825c1fea78851f65cb879c8ecb0cab9ff01880e932c43bd7dcd007cf99e959f051880754ccca382d1ecd5a7f03b64e0e7092dd8dfe0acc3b7e0ae5e47f206761edeff4d8c5fe396fa89ee07cc231bdbc0db7c2e9e597789335939eeadbabb1391e34fcae4de4381b3e6388d4a7d0efad3e4c462a1df02bc395d4608a8c23292ac54c70fe6bc2cd08eb643e38edb2758629bdf01fb7bf4752d7c05870c267268f0b6c9eed18bc5c42545a9a15ca8554ab8b338efec4aefb7f3526bc09ac2a6f4e7a78467d334bde2247b1306c962c58bf72eff8aa11b5468db19431970836f9b77a70de2462cfc3a761fedfac07a217956274c9f9e30718fd1c99b3a8ff939f73caae43d7268f38d5b0ba725a5c1e9cb2daff4bc7da8e83fbecac55c5e0a1a9071ef7e271f55affb8f90d3639b9fc1caeb385352180debd7cc8fb712f1fca08f657e23126d5fc5304f1ac87630247823b68d653306f03a061216efe9c9ccd345a734012432a5cfa18edfb804355c7ab52f547f1facd40d09160cfa3cd63de3204f9ebb109724df8417d08d0a10dcef3b2d373f09790a5337141693f7171bc612d89308f60054c3368657fb00c86e329f04a5d4a3ff6c5d630e6ad65855cabf755c3b421fd452ba92b83b44d2cbb47d5e5a35b2223020a5225c43b2d1ab06758485c2a0e723a51d657444cf5730ac7f69aa4923348306a716b9f838119d8fbedca8e4b2f06257a114f26c11c1d3a9e15bb8720677f805e33fc9ba80a4d0c2f895a604cf8920168d4a3067e98ebe740f083df4e66eb5be2ebf2db89c84bb0088b6d74ffed91d698a5d3c39151e53931c9b2eab3059b3807d69ff1e3a77ceab79d149778b0cbb57e696be8cdfdc999386d2473043955075634c6e8e5bb2a2cafc80ceb0cacbec4f57def6ebb3eb773a1ecb297c769bf044e89665c52fd5fd17530e192c85cb685da04ec1021e601a32f787ee55c2a65078def78fbf46a9bb8482c3835370b88243ed104a46f720d563c4925a219ee3fed60ff3efff43ec95fe462ab2224598df5cf134d89f2740acd25fd82065c39b62171b4ae27acbdb7da31570207437f4bf49cacc5c629995b9f2d97790e1d39e3b520e94675d2cac847a9ec8033cdad9abb5e707baddc14a06964defc3a68f70a5747e6864748159122d1086b04bd62c9ab1f8a4de1bb25dfedc7adfdd24ef9d098ff85c26d873a5188d8a594612e8a3c2a60dd975a744df39b777a6803e3408b5a497a56184e83de7b424f7c2c65762eb0070f2dd41f1f7526495e8b92202e3d9d727236dadfda4e718ca834a4d8fe4fbb67437b12d3c60f9753b099b7e608bbba364b265b0ebe72dee789ebbef79f44c1f196cd648c37b063539b11802731c8d8f4c031c4583ce5db884133016313508dd5a26c47d0a54c985397361f12bbfa23394054b6c963e5c72e4386b295bc4f0264ea1a2dd7a934ab0431915f51837601dadd93732baee5f796735b3d201a7f1f5e4c6d0ab30f86002d8f8feb55f0af951d7434a6cae6c517c1ad3b1638db216c2daf3ad33cbb2069297bacfd37f5a3241c8b19c172c50edbdb922c38f1451f4aaa4ebc8389a474ffae842cc4d89e1a8a6e6d694f64b15a1314d1dab50c7541f42efc80c4b13a6b2f6bc61eca8340d2019bf9eaa7ac6adf7db1a6d37b7fc204c6434645d83cc513704b4f82f7aa74264791f7455eba40a0b73468481278b1be3a23a233e448d857ab3c1bfcefe85ca6ab06c88fa31fb664502b50862e3ce5f6ce46d42efd030fa097c84ad90a7b2227af074c0ecf452076c1c9353a0e6bd941c4281550769ccb17153fad28e2ed0ab3dce1dde61e9873617cc73c66c86ae9a7a4e2df81f2f538f52240bc25651b6ff7e01e9d4c51498c5f6a62c8b1b434d3f66ea86b0e372ad5b3fb0543b3875fff0ca310dbc6e780e49551b02b82f07c83fa3fd0e241336ace642c6344904962e50a4023f0b48f5e41ec1edc2eb7fa626359690aea0b3554052abef2010c43ac16cc99eab533c8ea425d4c27c6cadc2d5cebf18be9db95dd8c58a72bbf791275405af45c05b3dd028e4dec25efa0b181e69e97153941b99cadec28219c7c2b53040c07a489ca7278274399eab8385256071cadaa249caec284dcadbeb6e2b64c6a8379308dbf0ed741813d4ffcefa208caed8ee2825ed28544c7da8262fd20071783881f5e606f350fa9feaf1b5c208221ccb573af32725648d6b517e8cc9e0a33b2ac7524a3da2feb148d6383cd88887beddd927ae51cf68624b30198d7c4603ef72faf0d11c79b009ce23e8c064943aef1719d3af9ae80c59f9993418ad473f285c51d64557ce250c5fa9fce81c053e204689c910b778ed44209ae6c1a0dfb120866ed3f90d62c291cec6c2d27452edd72fa49258860740aab86c7d4c3f2c1c081087c95bb4e6adc58343957e87a67948b053308993d71778dec7052a4795f9c610d048e78a66af6c0f0fa0c4188a0a5083b04254e7bace356af500972cba33808a89794dc3919a2029e44822252784130c6bf7655ebd3fac1cc7cd2e49a162f027f7627e11923260bfc32ca7575d1c541b72a4342b9378cbad60a9c0b348d28ccc37df3525228baa90215ae06f983f0f1f9809411a6e9d072dcd84c9e48aaa01af529913a2a4d7d57fde83ba7439db1f32f350f73ae92a225cc8f676ee344077bd34f83498221f24266d5fa19e5be2b9778a49f674aa5d78316b6c5339d204bc212f5d8e24503ee4ea4d250105ee1e180b0c1fb66bbbbd01412301fa477342b7093c6000d1955196c6ba25ad54076cc0051eacdd9161cdf08bb88d9915b6f61d4bf05e797e77f6d965a1b384d16eca8f56be70fb3dcbb85a5b302064ffd9f7d4ee2e037fe38be0a3f8e762ad5a0289f299492733ab9b562493e4dcda4a7a2c3458ccc7353587a21e6e7ac2d946670b4c627b8b7e18db70f5e3d98bef5c879eddcf630e4c5bae07b16959e42fe613b99c676f81aa224e7056857b8f8545364077a22773fa2e8f86b1dc2c9b7ee9703882f0d778863cf6f1547da50e55bae6b213a127da56eb8be3ca0c4e7db97e11510bcef8281f5afdaf8a75a4f9298142970c80c9d58699725ba64e69a844dbc191e29549ddaf5e8db28a1404dba14808de9113fbde3c301cc48b252ae4668e826359d1dcecfbe9ddef4a2ffad2d2f59330c811db6303abb76d2d9a87a0a99e53d63ca6140015f26cbb17734c625363838f51fe2ab77e5d005c87201e0294b6ecb1277880868a872336980f7634a2da760a997a62a4db1a5960da6728636480c3c2dd8789555a0c4dff80e573a5096e3f2e1c1caa6216e4c7487f04849da37a67d8218d12b8f50629e372a76af111e919944426e1bd443bbc6e993bce9eb5adca494ce29a8dd2b76e3ba278aa5be5204c616079535589186e57b018aa4c65b3d73bcd85465c05ea6356912bb60e3001509d1e42ae2d4e42e5a83facd08569c1c151b6a58a0af0f5377a8873d3338ccf85c240352e5d80543662316898be4fdb2328108463f319255b3e21531ba1d29acef9208ec911851d08", 0x1000}, {&(0x7f0000001400)="8f9b712ed74da8535bd2d8ae092f9f9806dbda7ca310f86c03a325653150a664984d6742829b9b5e1de123391b019eab22184a08f9a4ba63d9805720d8bafc52342388aa46370fb82640363de749ec92f5c2781a77e00ecee602d4d20327652298f8777839cf85da8da6a0e19d21a3af25e99d7d723bc74f91919b81e6cddb5909184b13720b2d8d4e1468e092e0027d17a8e830dafea219aacfc25a598caa1d3a83a24d2c98c3db05d16d6588633a89a49aa9ed51b40a", 0xb7}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f00000014c0)="41b706273b2e7fb68c038f2f6962bdd54136feb8d53bdde60ba018031676bad8af0f07d25efc991422152c33917eea36c950f7592d13135f01b8e739824f285312d05d1e08a87a9a8adea51f477c4ff422f8fd50f7c842cabde9f5179cbcbcf529d809cf32", 0x65}, {&(0x7f0000001540)="b8a298eb0f69df354bd393bed3b9685930d01d69bf37f23d8d349d9584f44a0863068bc7d94bd0723655a1dcb635a95cbda1bf44a25ef448638118fa0a743293db7caf61530372d323412b51fce41c04712ee563973c8e8fdbb8ac4c75d37fe5a9c807ef543a0f9a", 0x68}, {&(0x7f00000015c0)="0f2976795c5dee93cc71f60a4db050b80c2666dd2d817259e8656c30e5659c842cf722cb7bd23817b64c6597d8d2a4cd1fc6ee0676394826d4638473b773afc355f27e63d4cd80902b0d2d3d5bbe3182d30da26955fe5c00d048cd9627a6074b658d0a7659b02cb0b4c25ebd6f007a715a32f3840d94314fda6299a0cc632cead8f6982c817cc52b49279151b302f40c440191632593693aa7ce92048a54e72b47db1e355a81ac5b888ae43488eccbbdd179aeddf2c0d867", 0xb8}, {&(0x7f0000001680)="4d7eefe92e0efc0b0c5839f562203c440d00b4cfc159b877579237e1a8214e4e960397f8300ab5b023346e9f79d457fe35f12f", 0x33}, {&(0x7f0000002780)="5e47ecdabffec4c39cdc1b662f9382fb55ad6b9fb0c4ac6892b065d3855cda5138125976b8f7a51d059fef5a7922786adf0365e4bbc5735b35ef1025aa628120424635a499a72ef14a3e8da9683b29ca080a8fe35a399eebcdfad74ecf11f1375b451a475211411c444e7d376515b0d80ccbf46eac04d4897cc9b2695683b4d6286aff53263870ddb01019588ef9512506eb8b8a38daff016990ffe1846a542607754eb9840cf495ace56692e901ade1", 0xb0}], 0x8, 0x5, 0x200) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3272.164502] 9pnet: Insufficient options for proto=fd 22:10:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r1, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) openat(r0, &(0x7f00000017c0)='./file0\x00', 0x0, 0x14) fallocate(r1, 0x3, 0x0, 0x7fff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c140000", @ANYRES16=r3, @ANYBLOB="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"], 0x144c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r4 = accept$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="9f", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) 22:10:46 executing program 2: process_vm_readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000280)=""/35, 0x23}], 0x2, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/118, 0x76}], 0x1, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x69f, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, '.'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:46 executing program 3: sched_setparam(0x0, &(0x7f0000000080)=0xfffffff8) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000280)={0x0, "759f94e328ae53ed89578531caa8fd25"}) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x200000, 0x8) dup2(r3, r4) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) [ 3272.303281] 9pnet: Insufficient options for proto=fd 22:10:58 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4000000, 0x0, 0x1, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x235b, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, r1, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 22:10:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r1, @ANYBLOB="ff0f1100e3609bff2e6db6fba9edb8de7183741e79e3332d8cd1050000004b462da00424155267bfc83fa8abbc2df69786a7593f0f49eda3c0f19f9fa47e89263a2ab2308cb532db4dd64c021b6804654d85a6c192130febab1574b7a6958055f3cbd12bbebeca23b03f63c79f54a5cae7907098ba3c6d28741c1f000000000000000000000000000000d569d7e68e8fbe0b21ef6b94bb07dcb448118fd48fd6fbfcc6907e8128d9cba73212aa00"/202]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r2 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x400000000000000) 22:10:58 executing program 2: r0 = syz_io_uring_setup(0x4290, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x343}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0xc088, 0x40000000, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xdd5}) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1}, 0x10000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x3df9, 0x71c8, 0x2, &(0x7f0000000280)={[0x3f]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:58 executing program 7: ftruncate(0xffffffffffffffff, 0x1000004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x81, 0xbe, 0x0, 0x5}) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x7fff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x1) 22:10:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8, 0x3}) 22:10:58 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:58 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfffffff5}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) 22:10:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x28, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}], 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000280)={0x0, 0xb5c6, 0x1, [0x2, 0x8001, 0x8000, 0x1f, 0x6], [0x2, 0x7, 0xfffffffffffffffe, 0x0, 0x8, 0x1000, 0x4, 0x2, 0x8, 0x20, 0x8000, 0x8a, 0xa, 0x5, 0x10000, 0x5, 0x5, 0x173, 0x18, 0x4, 0x2, 0x1, 0x803, 0x8001, 0x1, 0x6, 0x80, 0x0, 0x34, 0x800, 0x2, 0x8000, 0x6, 0x3, 0x8d, 0xfffffffffffffffc, 0x9, 0xfe1, 0x3, 0x80000001, 0xa5a9, 0x3f, 0x3, 0x2, 0x3, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x9, 0x10000, 0x2, 0x1, 0x0, 0x742, 0xfffffffffffffff9, 0xa7f, 0x0, 0x1000, 0x5cfd, 0x401, 0x1f, 0x6, 0x6, 0x100, 0xfffffffeffffffff, 0x3, 0xfffffffffffffffc, 0x80000001, 0xa504, 0x3, 0x9, 0x80000001, 0x101, 0x8000, 0x9, 0x80, 0x713, 0x8000, 0x5, 0x5, 0xb105, 0x80000000, 0x5, 0x8, 0x5, 0x7, 0x9, 0x4ce, 0x3, 0x3, 0x1, 0x10001, 0x4be17a95, 0x0, 0x8001, 0x9, 0x7f, 0x0, 0x0, 0x100000001, 0x9, 0x2, 0x5, 0x4, 0x2, 0x1000, 0x0, 0x5, 0xffffffff80000000, 0x800, 0xd1, 0xba9d, 0x5, 0x8, 0x8, 0x10000000000, 0x2]}) [ 3284.397517] kauditd_printk_skb: 46 callbacks suppressed [ 3284.397540] audit: type=1400 audit(1771107058.897:69): avc: denied { relabelfrom } for pid=14630 comm="syz-executor.7" name="" dev="pipefs" ino=50861 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 3284.409759] cgroup: fork rejected by pids controller in /syz4 22:10:58 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r2, 0x3, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x1d80, 0xf0dc, 0x0, &(0x7f0000000280)={[0x2]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x0, 0x7fff) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:10:59 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x0, 0x0, 0x2bf}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x321}) fallocate(r3, 0x0, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{0x0}], 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 22:10:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8e262, 0x9e) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x800, 0x61) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x0, 0x7fff) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000280)="274024c46cd5ba84e93477cbc77cb41fb4b011b1e6c14894bbcde3842062a34bc3e41b784a3e58dd6899a1108463c4ea8b3926fdcfe3f8225c63283c3bee403b2304f6214b8521d57eb6d3c7d7e29597a707e8a281646b9a88328f156d72bf204c83942dec47b860f4125038b6470c0892cadb2512fcf8efc4085cc8c9c163d76bea80f107df74a7f7c0998a9512fe7f4b0c9cd233024605e1da3f28d18612c5f139fce40fdd4c0a279ffd58cbbba48bb01ba7cad95a2d064a5b6fdb03e35202a81550008801dba5ceb43a5461222a05d2597b88fbf2f32d", 0xd8}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000380)) ftruncate(r2, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x0, 0x7fff) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0}], 0x2) linkat(r1, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x400) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, &(0x7f00000000c0)=""/74, 0x4a, 0x60, &(0x7f0000000140)=@xdp={0x2c, 0x2, 0x0, 0x9}, 0x80) 22:10:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x8001}}, {@size={'size', 0x3d, [0x2d, 0x78, 0x16, 0x78]}}, {@uid={'uid', 0x3d, r2}}], [{@appraise}]}) 22:10:59 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r1, 0x3, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x32af, &(0x7f0000000240)={0x0, 0x6cf2, 0x22, 0x3, 0x2bf, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r3, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x0, 0x7fff) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000240)='\'', 0x1}, {0x0, 0xfffffffb}], 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000380)="5d07ac745d4244e97155b11a25a5c4e3addf778c8d147c6ca3db0c5757777161cb8b80038e98c5b19a72db9b7d9e7539c775e3da4d8df6c2959bced3c38ced79085e68d72bb082531e4a075113b5", 0x4e, 0x810, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x0) VM DIAGNOSIS: 22:16:01 Registers: info registers vcpu 0 RAX=ffffffff83e9f9c0 RBX=0000000000000000 RCX=ffffffff83e8762c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83ea0188 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8567b308 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9f9ce RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f67dcb95000 CR3=000000000f4b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=ffff00ff0000ffff0000000000000000 XMM02=ffff0000000000ff0000000000000000 XMM03=732f646d65747379732f6e75722f2065 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=000073252f732500242b5d2d5f392d30 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e9f9c0 RBX=0000000000000001 RCX=ffffffff83e8762c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83ea0188 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8567b308 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9f9ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fb1533010 CR3=000000000d2f0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414537fc00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000