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", 0x1000}, {&(0x7f0000000100)="ec1d7a78e8644f815b380c9fd40035796f403e125cc4c85a1f7e425f30e04f565bf20c9faaa53d1a0df3ffa86704dbf54da855835ed1f9e6a55bce61d81b23ebb49ebce6e86b7bd03cceb922ba8b11020a328281314f5e576fdf8f83afe31a3957c374190564b67fe444b0a5692bac4ce8e85eb9903032adb5d72837bc3ffed4bcf2d48497aa0e62a5159c0e6393523f1a46f06b9f548dabb90334a811054d340b3a1c0f5025501f64fc65424869c266", 0xb0}], 0x3, 0xc, 0x1, {0x0, r8}}, 0xc2db) 02:07:33 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:07:48 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:07:48 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x18883, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:07:48 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x80}, 0x400) 02:07:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:07:48 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) ppoll(0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:07:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:07:48 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace(0x11, r0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) [ 2294.238138] 9pnet: Insufficient options for proto=fd [ 2294.257218] 9pnet: Insufficient options for proto=fd 02:07:49 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0xa, 0x1, {0x2, r1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7e2ccc5a, 0x3, &(0x7f0000000040)="2af8c87ef161e7ff82e324e7abeef863078186d6b5c21dcad96aae6d27bcd31fb4fd3050cf3ea24c82d3253d94f9d230878e9eeef92042f485937ed3ce7c673290277a9b471941430f5bdf1a29840601169c2839438358d3c106f95570f07f74d28185b0f98c45db83628008ffe384cf1a0fe6f026ea660c437750521a0a9695b6e4739b368a93c2459a16c9963e0820eb50f7e0e5c2c5b24edd4e7ed960d42db08f1818e24caf8376dff9e33f8ff6abfaae9e857fe1bf1d223126cebe70415499856c60d997ee0bff3009d84230506412a30000d78e17b1417a362d59dbbbda49cc6ce15badce9aeccd46b0f98e3513035069b4", 0x5, 0x0, 0x1, {0x3}}, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:07:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000080)=""/30, 0x1e}], 0x2) 02:07:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) close(0xffffffffffffffff) lseek(r0, 0x0, 0x2) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x100) copy_file_range(r1, 0x0, r0, 0x0, 0x100000200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r2, 0x0, 0x2) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="b25e583f07e70c8d4b5d9d86826e269a81187fd517a9e9b3bcc9e52866306d84b77bffc7528320e9000000", 0x2b, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0xc) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) dup2(r0, r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000200)=0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=', @ANYRESOCT=r4, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB="2c61636367fce35b616e003574"]) 02:07:49 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:07:49 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x30, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:07:49 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:07:49 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:07:49 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:07:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) openat$cgroup_type(r5, &(0x7f0000000180), 0x2, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266656e053d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\f\x00']) [ 2294.694479] 9pnet: Insufficient options for proto=fd 02:08:03 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:03 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) r2 = signalfd(r1, &(0x7f0000000080)={[0x2000000000000000]}, 0x8) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x8) 02:08:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8083, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000002c0)={0x200, 0x4, 0xab, 0x1, 0x3, "5d03c2614e0792504ae1fbd1fa6f52d3664c04"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) openat(r4, &(0x7f0000000240)='./file1\x00', 0xc6600, 0x15d) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x10c30a1, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="ff00"]) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) fstatfs(r6, &(0x7f0000000180)=""/188) 02:08:03 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:08:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:03 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:08:03 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x20, 0x0, 0x1, 0x0, 0xe9, 0x8001, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x93, 0x7f}, 0x0, 0x100000000, 0xffffff81, 0x0, 0x0, 0x81, 0x4, 0x0, 0x80000001, 0x0, 0x2}, r5, 0x7, r6, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x7, {}, 0x84, 0xb, 0x1, {0x0, 0x0, r0}}, 0x80000001) 02:08:04 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:04 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18e) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:04 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r3, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:04 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x4010, r3, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:08:04 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000080)=[r4, r1, r1, r1, r1, r1], 0x6}, 0x6) readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:08:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:04 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:04 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b70, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:04 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011, 0x50, r1, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r8 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e, 0x80800) syz_io_uring_submit(r6, 0x0, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x2, 0x9, {0x0, r4}, 0x7, 0x2, 0x1, {0x0, r7, r8}}, 0x200000) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x3, 0x0, 0xc0, 0x0, 0x3, 0x80002, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x19, 0x0, @perf_config_ext={0xa27b, 0x9}, 0x48070, 0x8, 0x3f, 0x0, 0x7d, 0xcb3, 0x400, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r0, 0x1) 02:08:04 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000300)={{0x0, 0x7, 0x7fb, 0x0, 0x0, 0xfffffffffffffffa, 0x3ff, 0xf5c0, 0xfff, 0x10000, 0x9, 0x0, 0x0, 0xffff, 0x2}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:08:04 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x433, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x10, 0x100}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:08:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:08:20 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2655, &(0x7f0000000080)={0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x0) 02:08:20 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:20 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:08:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x1ff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r3, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x996a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x47, 0x40, 0x9, 0x0, 0x1, 0x9000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_bp={&(0x7f0000000240)}, 0x2700, 0x2, 0x8, 0x3, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0xfffffffffffffff7}, 0x0, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x10000000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x100) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2000, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7876, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4f39b74c505cad8f1ca6bdec8c283759bf9787b6bcecafe01714e748f00960f7275b1cac9f1534d71a62c30a910335862ccdfd622583a1ab8fc233969725042a51223cb2c09bc7f45f062064560b9e4b615d87571e9958fdee4116da4f47d51bb46d53d63caf215c77eddbbf348944212c79fade2cad353c31f4142b50a0cadf6ce4f18abc53802da58bbbb0865d3aa4f3969d836e005e570bb9", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:08:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r3, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:36 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x210001, 0x62) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:08:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:36 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2000, 0x7, &(0x7f0000ff4000/0x2000)=nil) 02:08:36 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:36 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x4010, r4, 0x10000000) r6 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x1d8) ftruncate(r6, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000500)="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", 0x1000, 0x24008000}, 0x6) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) syz_io_uring_setup(0x2e66, &(0x7f0000000140)={0x0, 0xa695, 0x20, 0x0, 0x200, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:08:36 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:36 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:36 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x4, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x9, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:36 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a73, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:08:36 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = epoll_create(0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) r7 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r9}}, 0x1ff) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r4, 0x0, r6, 0x2, 0x0, 0x1, {0x0, r9}}, 0x8001) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r10, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:08:37 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:37 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:37 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:08:52 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000080)=""/216, 0xd8}], 0x1) 02:08:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xa8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="30d0"]) 02:08:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4002}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x400}}, './file0\x00'}) write$tcp_congestion(r6, &(0x7f0000000140)='veno\x00', 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:08:52 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:52 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r6}}, 0x1ff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x104b}, 0x0, {0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) 02:08:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() [ 2358.117290] 9pnet: Insufficient options for proto=fd 02:08:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xaec46178bd874f11}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}}, 0x400c0) 02:08:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x108) io_uring_enter(r5, 0x7090, 0xd961, 0x3, &(0x7f0000000100), 0x8) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:53 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:53 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/254, 0xfe}, {&(0x7f0000001400)=""/249, 0xf9}, {&(0x7f0000000140)=""/103, 0x67}, {&(0x7f0000001500)=""/201, 0xc9}], 0x6, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40010021) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x2010, r0, 0x8000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:08:53 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/tracepoint', 0x902, 0x1) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0xb58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:53 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:08:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x34ff, &(0x7f0000000100)={0x0, 0xa228, 0x10, 0x0, 0x16d, 0x0, r3}) syz_io_uring_setup(0x187d, &(0x7f0000000180)={0x0, 0x6398, 0x2, 0x1, 0x325, 0x0, r5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 02:09:10 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109042, 0x110) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:09:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:09:10 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x68e0, 0x0, 0x8000000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='-}]#%\x00') r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x100010, 0xffffffffffffffff, 0x7) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:10 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000300)=""/166, 0xa6}], 0x2) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) inotify_init1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:09:10 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000080)=""/223, 0xdf}], 0x1) 02:09:10 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:10 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = fork() ptrace$setopts(0xffffffffffffffff, r7, 0x10001, 0x10002d) ptrace$cont(0x9, r7, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000180)='net\x00') perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:10 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x47ec, 0x5691, 0x0, &(0x7f0000000080)={[0x80]}, 0x8) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) io_uring_enter(r0, 0x5df5, 0x2d66, 0x0, &(0x7f00000000c0)={[0x1]}, 0x8) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, r1) 02:09:10 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:11 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x55eb2f3e2c230a3a, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x80) ftruncate(r1, 0xc2d) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r2, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5f02, &(0x7f0000000300)={0x0, 0x1936, 0x8, 0x0, 0x2a5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)="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", 0x1000, 0x800, 0x1, {0x0, r6}}, 0x200) 02:09:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:09:24 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1fd, 0xfffffe01}}, './file1\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0), 0x0, 0x80000001}], 0x10000, &(0x7f00000002c0)={[{'rfdno'}, {'##/!('}, {'9p\x00'}, {'\'$/\a]}{/-{O.]/#{+'}, {'\\$'}, {'$%'}, {'9p\x00'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '%@'}}]}) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x2b0, 0x400802) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x1, 0xfffffffa}}, './file1\x00'}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000003c0)=""/13) dup3(r6, r7, 0x0) openat(r5, &(0x7f0000000240)='./file1\x00', 0x10000, 0x13c) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 02:09:24 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0x7}}, './file0\x00'}) io_uring_enter(r1, 0x71d1, 0x494c, 0x2, &(0x7f00000000c0)={[0x9b]}, 0x8) readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = inotify_init1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x80000424) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = signalfd(r3, &(0x7f0000000100)={[0x6]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r9, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=@x25={0x9, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/122, 0x7a}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/45, 0x2d}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/221, 0xdd}], 0xa, &(0x7f0000000940)=""/78, 0x4e}, 0x0, 0x10102, 0x0, {0x2}}, 0x6) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r10}}, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c00)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000b40)=0x80, &(0x7f0000000b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x3f) 02:09:24 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fork() 02:09:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000240)=[{&(0x7f0000000300)="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", 0xfe, 0xcc10}, {&(0x7f0000000940)="123c155c24a9f5780a2bdd262c7f601bd291ab813498178c4c7190f1fbba8ab3ddd369d63db9786386b882b56788ac23b8fa94c6142c261ebe488db46205a31bd2ce8145d0aaf30c6e29403befca308d257a7a7cc44128dfe3e6d48027b49d70ff7007ff182a4e4066a17c558e555f4c2f57349818207e0ec0f76081f72bf4597cc270dd65cd69740a7f83c030ec72fc66d24472c6403cb757cc709373fe961006c48ed7e15c2907a70dfd581dc66364d48a1c00c452a2ce8b8c8b806629d44a55a1d019f92b5ae1a5c60e43e160bce72280e6d349418f33bfd23746316d0c4c3473d34f7dc603ccf7ecc14a928ae8edadd9a5f7cb31512dcf361b13d28de5a0ced617c3aba1eb16374040526c89b211eebe4ef32165de1ff874fb7d543226e5db3dbe0873d1ed92640577c226a91f4c6b9b97823a6313655343f4def0fbee4eab0eaa76592326bb2650a62007f41e54b8ba5260acce3460ab087a705c4db297fa04b02c2547e7719ef859b78d3e52285076db534c42039d3d1aefc32c21c15e43fc53f5dd64c9d662060436e1adae11984ce6eae9a9d0b140931655bff0f185d5782b07ba3d93d74db743a5b9ad8e14e4d317c835d0a4d1879b4ecfa9695cd47d625703caaf21b9fc275a1c3d637f43e4d0a38a29d98695d6e7b074e7f87155f31415036deee1c53f3d872b666ed49e77632f439325ea9c6dec99ec1ca27113f3fe93e1f1b55fd96c7b6e0cafaff95efd05c308f86c54dfa2595d8ac85a0eece5f0a99c88f9c55de4df5b48a418e1edc3ea8d791f86238d2b4fc8273d8a34f994662a0585d21fd7b859e690ac4ca90a597323ff6b571b021212e2f1a975d73191cd167709a1463f8c892fa6f0bc688428a586e4c43cd333e22fea547217f22ffbba4c180dc4a68a56c0cf564bd9457958d8c367210382871ef0bb673b85c880e01992b694ddb63eda81ce061ff07d16ff4ff4f049e31d76bd22376a59561e8d84ecd330f284110a7204f1dd2508b58b2cb1fa6f2448bde2b15da9524831bcfb0555ae0957924d90155aa7e16159f4d7273787db43aaa63991afd1fa2afc7edb63063b119fbd2d91a96b44b7b38007469e0ffe57339383eb65f7fbd43683f94e00ce1ebd33524dfaa6b19d3feb8542316cccc4f3de172c852f1c258cb6b0641560973a0a4023531b79ec995bb22678e2d2395df637d6ffee0ed46cb91e91ed77e07037cea1566d534353644f7b5c86c6efdfc137dce7c03eb4880683d916a144c2e7aef9b6b2cf38385af111fe91645dcb933c867c2029f9cd4a9ec0513a27f087024e1c8b48bea9d8c510c25c5ad9803a32793e84c93e614755f12a54d187771baf7c1a373054bc6f16dac4a9ac7e6f03603f2072f6214f2461c71efee666f98780a7d7d3ed1e20e8b6948afff6435448ec3f98b227448d242caf66d152deca4f533f4219d781f4f0d4548aa8b81163ae7bce70e2438eb42df73aee200f5584a8f513c806554d7f12c0143837b6c6de1fa4584896bae824e1572584375cda364581cf32e2c0dd6cc3b7478bfb8b4fdc7890dbcd302abfc00713d9b6fe24396be0651a4eab96af6b6a7ce11b6817f0ea7ca4792f3bf53610aca1dd2daa89486cb6997c4931a244a51d0fd0aa9bba03642e4f61cd80da3ffb8701822e9b328af8c4f698c1589bf8e252b4da4a0dfb448163ab02ba74a74bd1bbbbb7ba38338c6a4e51aa82e0cb09caea76fbe1e6bd56af1da19440570b6337eb596b4cdc9cdb7a2950784ce41881770ff4b713f7435fbfd14be7c9db56753d10a31dd010c777236edaa2d47568661f0ff233cf564e68de1943438825374e3e16283faee1c746954f82abc1f4f34e00b91fd55ff6d59b8136a3643711c437fedcbb125c6af4b2cc33cdadb0dae44afd7f893886dd2c33026dcd5d13dd88f96e1b94b172887a66b2e2b4a27a8b5dbc692c4cca8d37056ad77bdebd4ee22e8114636551189f6265f1b89b61ad8189f0ddc14ae0c9b2edbab5387b8d5a615d2874c1439c875b00cf64fc685aa2f0d4f5b9e7215c345414145c3221ecd098588a06b7bf6df9dcfa7225f19a79a310e2fa8f24200a3216befa7c4a0f89876aa109bd52f1f9d4f787011897cb9b4bf326439c91dc6a69dd40f9a70e65d6f56d0e124ec2adb4094e1f33e7c1206773119a004e032166792be948b156e718279db3caad74001c87a1dec6848e965d7bb979f3bd55f1ede95a60364af68ea21eb716427262813dd3465dcf2302dd7a382530e520b570461252ad49fab872655fd81f726e2a2ff00ad9bbf68255ad0f77ea5e7cea43701f5a2a99dd152eb02484be1912ea61663bea9c8c8a12cd8ea7c4a32fae94d5779e88ce6540859511e3f86769aed234e7ce18258d23003608ae6f1a3ec9eb2b09cf9812aadc48f5d7368accb094fdccc1d85a598e7ff5c24d6f986648c3f48299dbd610cde4efca6bcab59947f3a730024db5bc5f2bb016c659ba29af4627cd239b958efbec2f68f8981c263221cb9e130b069c6839bd9da7272f9165f165039df8c20493a09792c3dadc1b5d6bbb09bbdb9eadb7549603006af9f2a77eb5246fe10344f78ee42523d7b4861cb1de16c13dca8536da5f9a6edb8637398e51671a943516a51ca06ee9a7568f9b6ef5c4d24056d9c9d1b7d45b47dbc83e3e81615dfe4759419a10c6983635ae389d9312831e0121712f2c97da7119780c1acb0936c632c0380ec1b532c6b888da2e8b50e7d4097d8031735243c1bedcb1672d5b6d6dab44598f91cd941b8bf814ade580dd7b5712785dbefc9752c1e88919c04a964e0f60c366fbd37f9b51c7e85c275ad3b17a3876be9d8a2c184b3e8924b4f111cb00a27614632ca320bb185223076a6aaaf6955e5fe997c29b89f01ceb09ecfa48601ab1c56bdf8a77c0871b6ba9247196d5bc77b892320c67ebbf15ec8fdb14eef25da7349ea68c87d59afc64d0a61d43d98b451025afc16ecadbcab942bb812b1b0a7fdee9c571644895498750ff1c23e2544a8cdec0d65db9f08fe971172a4b6b40227b289fed83e58e92ebb2817ee49f2520c528a62314efafa2f6f384006c796157bb25bb39f8292fba7f7c4c46090c8f8f5b109f306bece86dfae3fc97f927b7c77beae6b7a399dd4e20915d4b7746673bdce53edd0c06e974fef055a037a5f0f08d8b6f211c10dafa737a278580eb9bead634897a433e81757c329ff95c80e078fb54ae6e247fb5ed5b589bbf29f18ec5764b6cda133bfae23e4f103a02bda172a655c1cd4d6739851ab7cac455a1ee9aa687b84e23dd084b10ee420047a7a2a16683fdfcc10032b2bd1c9129c9aa5188584a650047b185e02332f341b3d2d57774781e48dd95fcfc955756c687c784443d7c90eda0f5ae87ae8bedf8de2875f5e11ea29ab278165c4bf32df3c8f92394b87f280ae6758c0d47102163812897b304eb4b7dd89a0c60800db4c2caf2af3cb7569497c03063bd0ce796e17c1fb2ac2fc9fa4687fa885663beb63cedd3f0897f50452d926bd81bd081ee5b92d188014ba27e7512ba3e8708117474a15916201c2465e13a941df5c67cb0eeb84123aaac8c665033cb19af00cc197302da0112eb4e97702c01311c1bb6c6096b6e4a1e5644df87650b4fa7c7be2c8b911536ff31a3ec138f35f15246654e19d4b66555957a0653a0eac565736bc2f47b7f1d613ef1af1548008a5767af2e5d2a6b2065ec84ed86bb5f03a9e78e9c9e38493035610c3bb9d2ceb2e70682529e26a17949af1c0607ad28111a31d3fc84cd9b9f2e87142b0985728e02ec26071be525a057335e0cb0e08072f1dded2d653d0c6ea7d9b4acba47b465c5a23c8edfded5728e257cc7f8df5579ea0e0b03bac4d06a3e8af0a058ff788a71c87ae901a82ef56cb11e3dc81321fec3cd5100d2fbb7f14e29f1c69264c15c357a8c11e1ed02b1d245d85e5e0b694f9d7113c3b9fb47d07fbb4bbdd13d1b391493fc64139abaa17cfcd1053b0a095052ad78023e50d3a927039521eb8d4f804e981d5e64318205c48aa0c40924693064cc6debcf0470a13c891ff54992225f429712651f745cf719b6ed5fd495fdeee5af036f574eb93097b0585f00c1b54141f8f8c99e5bdabbd78a22da89210b53cc9fd147a840153b20d0676b2ae5b673210973d4432b703c06b28510ec0ab8244b1f7d50d0c537aef8a1985f536165619623d12fe1371284e220f8fd8a4f43b1fa1df90316a76219b00ab66a68ed8edd2875fb04e2e23ac54b5d2d8a52d015d4d564f66db2fbccc2aeebda29243e9f2f46d3efb581fb936bf63a756f9f2d7122dd422f4fdbd39d3e6828d96f1e8e6e275b8408f540d9adf40049b59144ccc5729dd3493951e78b4320cd41ff98a6e22520d49cd4940fd9d4f4c9810a34a6ccd7885f0c9200bd47a221e9f082ff9e425ff7e17c5ca310281a4dc8ef6f2815acd1600fb18567f9766ee3674e5e8cd5c619099c760cdac699d787db90dfc50c115d090025835ab392d9ec7a773569bf135e9931eeea1b5ea66ad19bd6bb0c14ab1be68dcb684fc248d27bf7629b58ed940f8bfb4dda7b3ce69d9a7d8f1e1ab2650e4825bf70682a6747e5ef5cb1cf58022bb77c6f9829b721abc8cd11be1891fea80efb717fd17d82694d5f883710c55f18c0fc6c1153d89b24f50df78a0aa5b0900c330154f38e693a44aae72fb6539236c41ad10e2db0462c64e5f0d14f740859366788c2b91043eb7ef0e90d91bd57373b17bc4be27fddf8f43f0a0a12baa5a6f372d46ed04c0028fee690136ff60302521570ed7f026e1ae7fa474e8d68eddfd00aa53657eae1a7d59886c1ad444fc0655d73c520229af36ab56d8968962519c7819fb45dad6fc0db1cfd7c6d158c5ff5265f89b4ddb856648d3f805ad3f0772b071cbdef8b00e2f4f090204d2e74edb3f9f2ebddabba61886857363056db7abf8e6aa529346c7e4ef2dd90dfd0f4a70740ee5ecc42e53fd108c9e6d3dbaccecb88c417d83ff3417b30383ba3ce0520b182cfb5aa42b9891bd2707541c8e9ab373e4d3cd78a8694c58d6c4beb6f0646b4de63e38b05134c5b3ca8727ffa048d53be1de7b690c9f6361a5059bfde5130cf316b6aa5f4d68e49ac7b3cdea7912c9b31856f46af428be3ce682f48b2e9eb7ae227566a63b7f66274552f41e018e14481654cc11d41d743c16a65ddfc904963d9ffe50f04dee1f18b2aca8e72b7ec94ae96c5adab65bac0acb406304bbb46ed635633c33682648a5d2732233aec15bf02b85f47fc7fda3f540f3e1e9c32e759a764bfce17a64dabe460b935f900d4fd657f5ae4531a9ec8d7c7e30cf76fe516359b446bc20cf45aded2a29cf12efda72cc448125e1bd2b9493d32a5e63a4600b973df767eaac5dc52eb454f4feaecae7deb1f78f31435817d6dc863d5d875a68519c879be27201155ab86fe517e4e6b734fcb0df34df93bb8ee77cb8126bc09c356479fd73b91c347d868ebbe86602c41b13de8285d24eed1e38b013dbf52290843d847e1d33898db5873d4f843f61e7c361be5d39efba14aa30c83d317ddfb159092fc0749a5bc3393b9d9e555c6b1eb9cb9f652f05dd2da99bb87e5aaf20351f979458aa359facab6c7c0d5f1aeb8c1d2267fc45f814a1a709728263c3f2a30f03861b61667d586a39da70c7b02f2ffddbbaaafbf7ce631a50dfe84ba6631702a9f7c7f4685533660307932103766b5e9f8f2db82e710575b40b72950242406b67925cab57f5ff8c99805955e654d1c77626b76619eb56d72", 0x1000, 0x3}, {&(0x7f0000000140)="68c8cb33559d9dd9b39e1e3e4f9703102b42fce53c7512efe58b57f2f8858f59d21b0ef3321f01049ec2537750f244cedb2e869318b7c2fc827c37f0df38e2fbf65c80a2b278f75e472454eae8f79076451a63cd7699c6042744e2da3ff7d5825fc220f820fa3849bc220787606b9b18fd4623c6fd80c00c8d53972b1625f81d5642adcde1390a4d1677631912452489c040288716872863faff79aac06b91e0", 0xa0, 0x6}, {&(0x7f0000000480)="a04ab277400881c08f7cb156a38d59283fec819a3756dfdcf2e5edc08991b00811fc3480b5704e14c835d84be13a0632083c907b3578fd9abde9ad2f753f0d44388a7e7aa43e1026dd65fd76a5a5f4d46e36e834377db80cb1dc457a12c40c821527a83375983a0364fb4d1ce5d11e7465bcc0958e2366cd9f55970409d99654e591827c85f0a0b154a2e47a2ac5ec683f3744a88dbd50abb8ad51ad3158f50aad41d2cb22dc8db6cd1b6e5095d733f66527aafa2d608f7caa3ebed88aed88ee728b25966029ab6b244e6db66ef15bb227c187a42d446a2ff15f9c1d5e58c0c7987578111e8b4266aa5b3e6a0bf1cf0bedd918b522", 0xf5, 0xffffffffffffffff}], 0x1010, &(0x7f0000000580)={[{@grpjquota}, {@norecovery}, {@user_xattr}, {@grpjquota}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@barrier}, {@discard}], [{@dont_hash}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)="0b199c1237a875ce03b255ec78bdbc4be27baca3f0d9734c8335041d161eaa95104e45e40dffd0647b900efe54dd9618a77a0e5cf285f41a3b4e2d8911aee08500301419", 0x44, 0xfffffffffffffffc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$revoke(0x3, r5) keyctl$chown(0x4, r5, 0xee01, r6) fchown(r3, r4, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2389.847126] nfs4: Unknown parameter 'rfdno' 02:09:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='3', 0x1}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r4 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syzkaller1\x00', {'veth0_virt_wifi\x00'}}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@mcast1, r5}, 0x14) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x2008}, r4}, 0x7ffffffd) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) io_uring_enter(r0, 0x104, 0xd12c, 0x2, &(0x7f0000000040)={[0x401]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:09:24 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x2c27, 0x39a8, 0x0, &(0x7f0000000080)={[0x100]}, 0x8) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:24 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x404000, 0x62) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) syz_io_uring_complete(r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:24 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) io_uring_enter(r2, 0x7d67, 0xd69d, 0x3, &(0x7f0000000080)={[0x9]}, 0x8) [ 2390.654110] nfs4: Unknown parameter 'rfdno' 02:09:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:41 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:41 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6879, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x800}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2800004, 0x110, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:09:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fork() 02:09:41 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x100000001, 0x3fc, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:09:41 executing program 2: fallocate(0xffffffffffffffff, 0x48, 0x300000, 0xbd10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace(0x11, r5) sendmsg$AUDIT_SET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbff, {0x10, 0x0, 0x0, r5, 0x1ff, 0x200, 0x0, 0x6, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc011) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1707519b) dup3(r0, r6, 0x0) 02:09:41 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x1}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x3f, 0x8, 0x33, 0x0, 0x5ab25620, 0x20000, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x62, 0x5, 0x2, 0x8, 0xf4a, 0x26, 0x200, 0x0, 0x6, 0x0, 0x6998}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r5 = eventfd2(0x6, 0x80000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="fb722225768537348fd379bdd1854dc745767904821da7fc49af2da078904fa29b88ced3301a86f6d089138d2a937b43542af5c430dbd511bd9ce1f34faf2fa404c12dd1fb98faeb0f8dec75e8823944524446d9786b9136eff843", 0x5b}, {&(0x7f0000000640)="52ef2fad3fbc5a73b49325dda07c0840baac0d7bd3a338cf0db1956803ffefb7861b8480f5bdfc85b1e2c0e01135f5e8bb7337b670472da4e0006a45c18153c3f14c8111c3f141ec47b0c2911b4725ee14daff052a9d5654b7116d485570e42920696d949c54d8584d61ccc8af2ce45393c8e0160f596ff0851fb44f28e81f4d49f94c0753031c0a1f81a892328c378e80db22fe8a53c075f633ed8b2d2ffd8c9e6083abeb443c6ae497e714575673c4f593df61e4efed5e6c0f6bc0ce6fde7d92a87499847a03384c51fa2861ce05726523490879f380f74830dfe12b2e2fbd5e4e", 0xe2}, {&(0x7f0000000740)="85f2638193ac9cc6448a18b0d9ddf8e0469f8fd611a955ab0278", 0x1a}, {&(0x7f0000000780)="483a835698716bbab1", 0x9}], 0x4, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x88, 0xf, "fa3600fd85f160e54464d51fb8"}, @timestamp={0x44, 0x24, 0x62, 0x0, 0x1, [0x6, 0x4, 0x6, 0x7, 0x4, 0xac85, 0x7, 0x8cd]}]}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x4c, [@rand_addr=0x64010100, @empty, @private=0xa010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x5, "6587b9"}, @timestamp_addr={0x44, 0x1c, 0xc6, 0x1, 0x7, [{@private=0xa010101, 0x2}, {@private=0xa010101, 0xffff}, {@initdev={0xac, 0x1e, 0x7f, 0x0}, 0xd716}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}], 0xe0}}, {{&(0x7f0000000800)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000840)="56cbd7c366e422137c87c6aaad7fc23e0573406db569dff70e856e88b2", 0x1d}, {&(0x7f0000000a40)="b289e186afdb3341f7c6792ed997da6b2a11d60e438e41d9931404c3bde29eecbf338c4ac32f877b3a902804e833db003c85e1eba6d6ff1fe8cea7c728a596d39c907b14396dc3960871536b4471dff3334aff6279802aa51273c78c98e0197e1479caa91ffcce4d7560e81174f9f86fdbeb08fdc303718072ced9dce15a8125ae34ad9f", 0x84}, {&(0x7f0000000b00)="59c321092693783d864a491c9926db1a7aab2cca0386426c0a8479fcbd51a4827443aa67068cb02fb59ef36adbabaaff64808990ee8f1bf17fa4eac61a5f1e6797dbc86d219bcb41d248cbab7b99d6d50c27909c77ec41d6e2d1020acb96fa861252a262ee530d30ef0ab537e62f26b292f1f9196e1f46033c41", 0x7a}], 0x3, &(0x7f0000000b80)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x60}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000c40)="c5dda1b5c2e48b4f0a9df319da89f41df8314d22b63198aef19b9dfd6bf43ecee52ad0d827052e2c70cd34ed3af793f3f6c050eb6b16f430d0f1c25fc48f7b312ce8fdb3a5b411722d6c45254ddb3c35f6d7a69cbd12bf91a2e6b921e25dd54bc7d133f89c9eec2e473dc3f3a1aaf18258ff32e373b979fa2d34c0ccfed6bb1c402a27475a60234cd918796925faa1e1e7aa8eb45f76dd9b4c288caaca0b4b0fe9d9acc38838e59301d67871", 0xac}, {&(0x7f0000000d00)="275ce03484bf3737cf843e40a39dd7b6c1a94b47a2edf7922d87e69fde59dde6914efc0eaf3b33d4c7ac92bdab86eed9e63c2e0c9bcfe3e3daf54bc77382059a43fab8485143da7e4c561cb943ba0b60881dbab24cce4a85923d799976be32f2be207029a1d219b063137082152c5610bac8a5b10f60bca4d91ba6047cf4797aac579835a65dda8e10b220a8", 0x8c}, {&(0x7f0000000dc0)="bd0c22d0572a569627ca3f137f043858a47ff5e9cb9ba064e79dbcf09bcca0876b6439de0a819cf997a07c48bcb940ca2c7d", 0x32}, {&(0x7f0000000e00)="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", 0x1000}], 0x4, &(0x7f0000001fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4f}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x10, 0x8e, 0x0, 0xf, [0x718e, 0x8001, 0xe6b]}, @timestamp_addr={0x44, 0x3c, 0xdc, 0x1, 0x6, [{@empty, 0x6}, {@multicast1, 0x800}, {@rand_addr=0x64010101}, {@multicast1, 0x1}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x9a}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x100}, {@multicast1, 0xdfa}, {@loopback, 0x3}, {@loopback, 0x3}, {@empty, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8c2}, {@broadcast, 0x1}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x140}}, {{&(0x7f0000002100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002140)="bf0c6733b5e75a4107c069be2fa617646c600aeea0a188dee228b4400a9b08a5414d1e1914455f6228c034445d440d31c9e7439c19931cccfd89f23a3be26c1902f2d4f340a07c4a184480653bf434cfc0fde57fce8a2025817337c010316f15ed872b36c977f5847080495c1152099c0ddd2f12b179c4b2233a6254577cff870630e50511a2775e6512bad99363cdd10599b81975b5787af9a835253ac6d8bddd45b63cab17cd12ff66542003930be620e74e00288e", 0xb6}, {&(0x7f0000002200)="a1c3f99062326e382355831bcd5eb0188c777ff9bfad7d759e5f2ecc339a8ecddbd8021226e04b232ac7c21da8aff215e90c152a8ff8eb20a0b485a6650b65332e938447e8ec926d7448fb57324d7681364168d9e0ee90e207cd632e983a3175c8026c2290c4393d1962a4ee8fe38fe4600882e8c29e6e6f1dfd5dc6952958bc453498971fafaaf5b87d58a4d9901aa369fab6464ec8798b571b1b8642f57f4c18594eb672db8e2ce8b5ad9800021adf8f8f25235fe9d756ba0ddb4b90512ec18da24bfab2f48bfbc2f9742a8dae887ba6d59eaba0d28e78f62e0169dff4b393", 0xe0}, {&(0x7f0000002300)="9458471b28b6d29b4b5c89c8af2e302e1f59f5b599f2d66de0df6bd1db74b2b5c26eb819ca750f0df89b2bbdb2a6f34b232867e33b5076b0c25c93164b4a2a3ebd0523759b8380e4b6c1610d68f404b08aa98008a1486435a91e2cd3bef2579f6f99ba5847a087a78221f8a04657bb96e747a5c0e76b52222a0dddcfea039508e063071253eeb4671db6cf00659cc81a01e6d7e65dd9ffa282b9d13de7d52197437e0020798bfe9bdf0207a5abdc313ede0610b549", 0xb5}], 0x3, &(0x7f0000002500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x38}}, {{&(0x7f0000002540)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002580)="987e2a91bcb41db3e92f5677067b1ebe79e78f5356ba693d12f9c54122f919b907136151dbc5e432b1c3454b16b85c609a754821d29ab74903aebe228e6a1f3fb1d975f19703ec9761fe140c25265f4891462c9d6870b0966675255161c812855754efcdbbcea12786619acb0c12a14965c59d4aa0743035042568f36fcb76fb570688ef6eb24f3445c9f5cdb3a7eb9ab127654222bf6648ed4ea68dbbb816e9a6ffdfe1efe75223f7ec89e6cc39976c19005124c565efb7480da1ecc7d5c8ea934b504fa3994a6181ea80", 0xcb}, {&(0x7f0000002680)="7460fdf12e59eeb1ca849f094086a04095ea037b003197d242fcc5ad91dfed2983c1e9d3437559453c780569d97d925ae6e194b2c048d593c6f98bae9290d547c1cb8b7fe97cb4e6c2fb82d333ec7fe6de25d0cdd543bb7470393d77968d5c23dff19f64ed60f35e7eb670989967e359375c80", 0x73}], 0x2, &(0x7f0000002740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}], 0x5, 0x4000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/mdstat\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x6, 0x0, &(0x7f0000000500)=[r5, r6, 0xffffffffffffffff, r8, 0xffffffffffffffff, r0]}, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/5, 0x5}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000085e31acaffffff7f0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x40) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x0, r9}) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:41 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000000c0), &(0x7f0000002a40)=0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r4}}, 0x1ff) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x3ff) readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:41 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fork() 02:09:41 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="93a52bfcda5697e8cd468bc5230af0810cc9f56a65ce3ea6748a3b716cc01e22aff31b3bf3ffd25ab9cb44e80375f9a9df5638d5", 0x34}, {&(0x7f0000000100)="a66e32744fb1c3a69055e561b92d65813ef1be0c15821553d42d34d378282bc8065056c57ac5a93b5393993272b0cfa0d3b18945d8112a5698af7aff7b801d9623cf111284e141eb857dc80e644542cc6c1312cf9c2732017e577b4bac1e648dea1f372bc884a6bc6da43f7cecd8c4d567bcd44961f80b57fed3cdb8e2dcce6177a96ebcd8eaa56f80f1de35b67b4774bfa28280f2c3552bb5d619b535679d0411ecb089897e3e902a9d968c85b30a94a27c414111ecbe9c05f9c3edec6a87", 0xbf}, {&(0x7f0000000300)="1f8d5686fab160cb0d0ea23169b38a4c5f6b9072d8a9632e59e74df6f30f9efc2f97668a073da24552140b23c22ed81bbdab0e0c230921d16d16aaa5123f84332ebcdcebf00d5ba7f4635efc3d7b50ec9bcfdcbf625a0c067b36c2823febd893e08cc8e3243dd936c800df8ac9742dcceda165eef5de4078fb8ca23d27caf7d93a79b38a605e9b62a547b2226cb7484b34543443478ad9d32456ca1c5c2b736bf3f4bf847a55f96be16217e5b6d1", 0xae}], 0x3, &(0x7f0000000480)=[@hopopts={{0x48, 0x29, 0x36, {0x84, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x9, [0x6, 0x8000000100, 0x1, 0x1f]}}]}}}, @rthdr_2292={{0xffffffffffffff70, 0x29, 0x39, {0x16, 0x10, 0x0, 0x5, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local, @remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}], 0xe0}}], 0x1, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r6}}, 0x1ff) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r7}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r7, 0x0, &(0x7f0000000580)="d262a1c71b4fd5893d9ff958ddf45bfd10f3cc17aa9fc261c2ad174be4bd23e49a7d973561def4f7ae53159f7e4e6b8e7113cc38dec427dac2251534b29907bb324c45ff5cfee730cdbd923b15e372f23c5927e03884cc5a38dc8f67dacaa36f5c736fcd341765c5e51f63f46ec1fcd6ff114db292fbf62bcc45763d3aaeb25d188bf9d372821997514561207c23b50638a935f2595f8629e064fc69a84ad1a77991606a7f88fd4360036abe9bf6c7a2f160fd659409e24c78faa4564af09d58e911b8adc7d02c033fab0df5d82fd69d71b83a909d877a88d7", 0xd9, 0x0, 0x0, {0x0, r6}}, 0xde) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10201, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x810, r4, 0x8000000) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000004600)) 02:09:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:41 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_enter(r0, 0x530, 0x8043, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) read(r0, &(0x7f00000000c0)=""/130, 0x82) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r2 = dup2(r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)="2f00bf4078d536ee10c23a791f25118b1cb8bdf827e4456759fd0f23526e8aa19874013c6ff028a8f0212aba5988f48b65d728280f31a955e4d779f2f4904b05075fb85addcbb24708f569f74294174adad1d52ccf66e648a3d9a7980b377ab5d61db73e7a0f8bd9a3ecb469eee57830dad32ebf85d14845a89da8f48efe24", 0x7f, r1}, 0x68) getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) 02:09:41 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3af5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2d9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x8000000) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r10}}, 0x1ff) r11 = syz_open_dev$evdev(&(0x7f0000000100), 0x7ff, 0x802) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6c64, {0x0, r0}, 0x7, 0x4, 0x1, {0x0, r10, r11}}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x3b40, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, r12, 0x9, 0xffffffffffffffff, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r13, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:41 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:42 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xffff}}}, 0x9) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:09:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x1f, r3, &(0x7f0000000100)="cd258914cb65b52a5e8f0c5341a8d745cb4ca2c7a013b6e276d351025f9cb07e19717596b09fa0a16486e68b79b574f86d4dde987a6e340385b029470faccfcd38db5bfb74f86d794d4def6e405dd365ae7b3627ce1eb24206c51f082daaf5a347e6b15936466197826d692593453535e2ef", 0x72, 0x5}, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:09:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001500)={0x0, 0x1, 0x8, 0x2}, 0xc) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r1, &(0x7f0000001480)={0x2006}, r0, 0x1, 0x0, 0x1}, 0x2422) openat(0xffffffffffffffff, &(0x7f0000001440)='./file1\x00', 0x410a40, 0x100) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/13, 0xd}, {&(0x7f0000001300)=""/139, 0x8b}], 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 02:09:56 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x3d27, &(0x7f0000000080)={0x0, 0x9a19, 0x20, 0x0, 0x357}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = socket$inet(0x2, 0x800, 0xd9) r4 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r6}}, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r7, 0x0, 0x2) pwrite64(r7, &(0x7f00000000c0)='a', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0x9, {}, 0xa86, 0x4, 0x0, {0x0, r6, r7}}, 0x3ff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r9, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:56 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r7, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0xa, 0x62, 0x0, 0x8, 0x4}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r9, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r9, 0x40086602, &(0x7f0000000000)) r10 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x100000001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x18, 0x0, 0x1}, 0x0, 0x9, r9, 0x0) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000000040)) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:56 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(0x0, 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:09:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4002}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x400}}, './file0\x00'}) write$tcp_congestion(r6, &(0x7f0000000140)='veno\x00', 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:09:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) syz_io_uring_setup(0x5e67, &(0x7f0000000100)={0x0, 0x275f, 0x0, 0x3, 0x31f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)="332604ec39", 0x5}, {&(0x7f0000000340)="d58848cfd3e8c6bb8c", 0x9}, {&(0x7f0000000380)="78d543b2bc735ccac445f42e60441289b83fe815e5fc65778c77b0f8b133a8e960e2b44bda8293136c2d6b7a931363c8a08883fec12cc501927919e479197fa61e55a599239ed284394c2cc73cf33281bc7304a4ef9b979e16c527696d039948df5bd4074e0bba106c631e9d10ed77d2d7ea25e2a842752d834299", 0x7b}, {&(0x7f0000000500)="13ec0ed241b1ce5370eb93a5a0d90dd89d4d7f50d0c410ba3579283a30865b79317d3121ae498789527f212ccb88d0986d7cf52608e0e7359da8d126416ffb0c0aa125a79189bcb864044f26c2b58287a77c49b8e184fbd2df4d5f62c5b8c27fc36a9763b14fdd9372158b004f0dc4f83809d368255c8e42d9474c1ba4f45d63ce09b9eb8fef5082313a00de2870bdbb48699c6613247f7b898a89e255874707cb64c685f8c164643bd15ec18c78a24b9e225588ad7ae1c74beb7d350d3e", 0xbe}, {&(0x7f00000005c0)="636b4d03c9bb2f69c0536fe8d0486e98bf2822cd9c4458e4917cdfd7b46968d2f9b22c60fddc09f94230b0c5ad4d86ec312f8f2f01340ca619e213c14583a6a300c3668ff29cd321ab2f126692c1e3581fd0bd5093d16b62079302dc277aa4720975ed2ca97ad69144d15d1fe2aaa826db14c52c90bf82d6fce5", 0x7a}, {&(0x7f0000000640)="38ac97942ee96216fe0db20d473a025b0c69543f5b9676ed863be7f84b441d300e8ffe2f24d744900783b816df48a7636836474276b82b53d672e80c4d5474dec16419bfd51a66fe8ccba3c259fa261612341a37c41de08a2c37c5099e49efa7acb4eab1d34ee6719b5f74bdb7f0da97a4bc7c3594935588795ce21285d976737dceda3f9970f6e903e79ed3050c3b4164c682b3931656d95204fe3ca81a2b7576d6ea10956bd58a0fa023a9d7710e38f97cf28b389a4245fa418186bae1a977e1f66f4c14e3db0983c71f12464d8d5559e76e44894665501f61d4", 0xdb}, {&(0x7f0000000740)="f6dfab4089767575567332a4ef9c53c0ca181bac252e7d79911b441175a809f9c78de543f10537e8cc7b9b7a92436004cf9dc9b07f6e7f54cc0b59743a3650e1075119205562119d48", 0x49}], 0x7, &(0x7f0000000840)=[{0x108, 0x6, 0xffffffff, "9c554b3cfce05010ce03dd9ab379632402b2dc29f2093819dd45772fe00fe5defb4e34297475e89b6a21221dd640de56a69c43903c152f60fe712f5430346ab4d3e1447aadd3207da89c176726149846e3321cec726d13d5e63b6cb6d7ada8becc852cdc2eebefa90098a432d03b9f2305a75b833ffe1bd08ae830bf3f8677a9905406982aac8b2df85540c4e0b911315ca6aa3512df4847594bc27f18c5d5c25ebdd0cfb29d48548b4febd44bda918c10217f882128240d193f4d4300b19842129bcc17366c7c2b743381eea5d75add776d243e54a558cfa61513d175209566ea018741937556224a52436cb042d40f4768de7b1f"}, {0x40, 0x10d, 0x10000, "1ab1a3ffbb7d7a1398cf7bb6526aac9e172bdc80cd3e70f279ab0375c73e90b4c235b325d73bc6f415f20ec40ff948f4"}], 0x148}, 0x0, 0x4000010, 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) fcntl$notify(r3, 0x402, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:09:56 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') io_uring_enter(r0, 0x7c7e, 0xba56, 0x0, &(0x7f0000000080)={[0x8]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4080, 0x91) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r2, 0x0, 0x2) pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:09:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000003800)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000300)=""/165, 0xa5}], 0x2, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f0000001940)=""/242, 0xf2}, {&(0x7f0000001a40)=""/231, 0xe7}], 0x7, &(0x7f0000001b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000001c40)=""/140, 0x8c}, {&(0x7f0000001d00)=""/233, 0xe9}, {&(0x7f0000001e00)=""/65, 0x41}, {&(0x7f0000001e80)=""/221, 0xdd}], 0x4, &(0x7f0000001f80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002200)=[{&(0x7f0000002040)=""/143, 0x8f}, {&(0x7f0000002100)=""/230, 0xe6}], 0x2, &(0x7f0000002240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002400)=""/29, 0x1d}, {&(0x7f0000002440)=""/182, 0xb6}, {&(0x7f0000002500)=""/135, 0x87}, {&(0x7f00000025c0)=""/59, 0x3b}, {&(0x7f0000002600)}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/216, 0xd8}], 0x7, &(0x7f0000002800)}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f00000028c0)=""/217, 0xd9}, {&(0x7f00000029c0)=""/5, 0x5}, {&(0x7f0000002a00)=""/154, 0x9a}, {&(0x7f0000002ac0)=""/88, 0x58}, {&(0x7f0000002b40)=""/251, 0xfb}, {&(0x7f0000002c40)=""/23, 0x17}, {&(0x7f0000002c80)=""/39, 0x27}, {&(0x7f0000002cc0)=""/228, 0xe4}, {&(0x7f0000002dc0)=""/153, 0x99}, {&(0x7f0000002e80)=""/135, 0x87}], 0xa, &(0x7f0000003000)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003080), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003100)=""/14, 0xe}, {&(0x7f0000003140)=""/186, 0xba}, {&(0x7f0000003200)=""/74, 0x4a}, {&(0x7f0000003280)=""/5, 0x5}, {&(0x7f00000032c0)=""/153, 0x99}, {&(0x7f0000003380)=""/51, 0x33}], 0x6, &(0x7f0000003440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003480), 0x6e, &(0x7f0000003580)=[{&(0x7f0000003500)=""/49, 0x31}, {&(0x7f0000003540)=""/20, 0x14}], 0x2, &(0x7f00000035c0)}}], 0x8, 0x10000, &(0x7f0000003840)={r0, r1+60000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x100, 0x10, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2a, 0x3f}, 0x40400, 0x7ff, 0x80000000, 0xb, 0xe9, 0x2, 0x5, 0x0, 0x2}, r2, 0x0, r4, 0xe2377e27e0a69c0c) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:56 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:09:57 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') syz_io_uring_setup(0x34fa, &(0x7f0000000080)={0x0, 0x6879, 0x2, 0x3, 0x1dd, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:10:12 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) syz_io_uring_setup(0x2579, &(0x7f0000000100)={0x0, 0xe3dc, 0x10, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:12 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:12 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x3, 0x4007, @fd, 0x4, &(0x7f0000000280)="9acdb0f1", 0x4, 0x7, 0x1, {0x0, r6}}, 0x7) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x200f5ef, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8912c86f5d35e9ed, 0x30, r7, 0x8000000) inotify_init1(0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc3}}, './file0\x00'}) syz_io_uring_submit(r4, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x2, 0xc, 0x0, {0x0, 0x0, r9}}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 02:10:12 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') syz_io_uring_setup(0x34fa, &(0x7f0000000080)={0x0, 0x6879, 0x2, 0x3, 0x1dd, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:10:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:10:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x5aea, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="be1b6fd7068857be7690d144265cca0720a4f59b131fc1d682e7b6bd42c437d3e5c0cc901caaede9aaad98e2dd40cb1ef1f77bd4ca520bddfdba10ae32fd203a72127064fad6dffe1633c50eb31b823e", 0x50, 0x1}, {&(0x7f0000000240)="52ad04425b0f7f25d87ad09cdcd7c27d2335283215429981f92779b06fbfbbada348208e21f1532aae17e447c5fd58", 0x2f}], 0x211400, &(0x7f0000000300)=ANY=[@ANYBLOB="6e725f696e6f6465733d3267336d2d2c6e725f626c6f636b733d392c687567653d77697468696e5f73697a652c6d6f64e53d30303030303030303030303030303030303030303334362c6d706f6c3d01000100726c656176653a30383a332c2d2c73697a653d782c6e725f696e6f6465733d303236653c302c6769643d", @ANYRESHEX, @ANYBLOB=',\x00']) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r6, 0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, 0x23456}, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0), 0x6044c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="4d2d227cf73ca989e48a8d401742e8d7ea15b42766e2366f3cae06d0d565daa7098085915b6913111b35568fb5f1b0e87d04b8937b7a29dc3e6ea9e072a5474031e90d5b0340924d0220e6ec89d626eeda1d6849b9a2286ec41d396bacfe392403c1b1059fbe1ad1b583f505378552d7e142800b8fadcc25b3745dd468e82071d63ae6b998a3627806d222c451ad8d5aa499fe47e851b6057a97aad1c027f30ea850d227e879187611c904da4a38309f397b4fb653eb2ed6d929428175809063d77017000000000000000000"]) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000600)=ANY=[@ANYBLOB="f7e316", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) openat(r11, &(0x7f0000000640)='./file1\x00', 0x1, 0x183) lseek(r10, 0x0, 0x2) setxattr$security_capability(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v2={0x2000000, [{0x8, 0x8}, {0x8, 0x3}]}, 0x14, 0x1) pwrite64(r10, &(0x7f00000000c0)='a', 0x1, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r10, 0x0, 0x200f5ef, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000440)={0x0, 0x1e8f, 0x8, 0x3, 0x11a, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 02:10:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4002}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x400}}, './file0\x00'}) write$tcp_congestion(r6, &(0x7f0000000140)='veno\x00', 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:10:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(0x0, 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() [ 2438.217541] 9pnet: Insufficient options for proto=fd [ 2438.264863] 9pnet: Insufficient options for proto=fd 02:10:13 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c3597f86a9450fe314b5d94668dfb98588de99913a9d47fe0e0ad1b2fbb7d520611a1f04fb496e3a95758334761b52a2a4d96c7bcbdf10b0f4348de649026c75ae473ae28078342e785154d5a25d10bd", 0x50, 0x8}, {&(0x7f0000000380)="2db4ac49d166041eb326e9b748475e57a25905670f49552273e650f1c6871a3083473c8fca2d679295de3a39bedc6ef66ae8fcf86f4058cfaf9d28569e96354f339b", 0x42, 0x10001}, {&(0x7f0000000280)="f345660fe7eaf52e90f3b0dece4f0f0f76dc70af50bb1cdd5f456f4582602495bf", 0x21, 0x8001}], 0x10000, &(0x7f0000000580)={[{@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-++'}}, {@obj_type}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="01006000000100000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:13 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x115140, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = syz_io_uring_setup(0x3f83, &(0x7f0000000100)={0x0, 0xb3f6, 0x10, 0x1, 0x1ab, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x97bf}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x8, 0xdde, 0x3}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r10, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r10, 0x40086602, &(0x7f0000000000)) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r9, 0x0, r10, 0x2, 0x0, 0x4d799cb4bacb7262}, 0x10000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x2c2) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x7, 0x0, r9, &(0x7f0000000280)=0x80, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x80800}, 0x8) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r11, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) [ 2438.419446] 9pnet: Insufficient options for proto=fd 02:10:13 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(0x0, 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() [ 2438.547006] FAT-fs (loop5): Unrecognized mount option "fsmagic=0x0000000000000009" or missing value 02:10:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x81, 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x3f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x20008081) 02:10:29 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = fork() ptrace$setopts(0xffffffffffffffff, r5, 0x10001, 0x10002d) ptrace$cont(0x9, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x7, 0x2, 0x0, 0x1, 0x0, 0x6, 0x4002, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000240)}, 0xc22d, 0x1, 0x1, 0x5, 0x8001, 0x4, 0xff, 0x0, 0x9, 0x0, 0x4}, r5, 0x6, r0, 0x8) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) syz_io_uring_setup(0x5443, &(0x7f0000000100)={0x0, 0xd835, 0x4, 0x0, 0x195}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x50, 0xffffffffffffffff, 0x10000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r8, 0x0, 0x2) pwrite64(r8, &(0x7f00000000c0)='a', 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x100, 0x0, {0x2}}, 0x1000) 02:10:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:10:29 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000080)=[r4, r1, r1, r1, r1, r1], 0x6}, 0x6) readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 02:10:29 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:29 executing program 6: perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x115142, 0x0) lseek(r2, 0x0, 0x2) pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) getpeername(r3, &(0x7f0000000180)=@tipc, &(0x7f0000000040)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) write$binfmt_script(r2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x1c28, 0x6, 0xffffffffffffffc9, 0x6}) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) fchownat(r2, &(0x7f0000000240)='./file0\x00', 0xee00, 0xee01, 0x400) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8001f4e, &(0x7f0000000300)={0x0, 0xd369, 0x0, 0xffffffff, 0x40000111}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000380)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000880)=@IORING_OP_WRITEV={0x2, 0x1, 0x4007, @fd_index, 0x2, &(0x7f0000000800)=[{&(0x7f0000000480)="ba54dc8a87755cb97fbe54eec21a8df98167eaa16e62b9b38058552573dfc4fdb36d089b68b782d7ee6f16c5b80ed72659015181654a7f4579259c358e8718f84fe6ca2f9af481060fa88f950ff118b505dbf75a6f626feb0f03d281b9381e9c4521ceb1d4588d0eff6a0bc15c6ef5940343936e4465d2c3e53bf413c617fb7414200adf0337295868c43e8a52fa1eda7e95fd95e81a861e1b5a94f23c16811b000c3a5a4255037c7ef78759eebc33ea52000000000000000000", 0xba}, {&(0x7f00000003c0)="358102a0ffee87dddf1159bb4e3aa420126db3309b1183232936", 0x1a}, {&(0x7f0000000640)="039708dd0d10178ae7f601cfffc4ba1b08a05b52fa2e8525cb2c43effd406b01ebaec586603439791b668553e997f2cda2925ebf8948a35253ea238422def0ba47416e435f9b4938b4089bd17729aeb19fd91fbf6e36203c10db2e9da9e34ef82968089ae3d77d4d70154f76bc436dc5aac8d33a066af1762c966ed11fff627a839fe264e54388629fe086dab2e891a69f12964b84d1155c8208e83e603436b28c60cf4e38d1ac5ee3b4fed1c34e5a70c73a5e9344129bfc48c2d13fe752869e68baf04b5caaa65b025f473c39dd85440252338d31cd9b02d31a03", 0xdb}, {&(0x7f0000000540)="987255fefd865b00fffc20fc07b098d59e1a4feb64f658bc99ab3059d482738712edcc119ec49cb4dca32823a58dff28f319ab052daa38706d691c757e152ef2d40c5b0b7bc0f4be301d4921defd4637f88d40e3c17bab12580921e4456bf8f230144a5c861c5a558956ccf7fd0e0cd5c83f3ead40e2a67a8189ea36efe0623cc80488155adb2c17c95d040dcc5a578ccc32ad85ac2598d0c08aed857d1894792caf6813f8fcf5c1bfcd01b40ccb8b9ebeb76945ba705e66ab73040d42408d3241e7cb12f15a49383e1ef7eb", 0xcc}, {&(0x7f0000000400)="4ea34c77446fa77491d3fddf49ff7e163d73f7a656", 0x15}, {&(0x7f0000000740)="94f8662be2b65246f6fb153477ac080161869db572c1b72848e157c515188b92210c295ba1d33b262212ba4106d256136a006908e1585ba52cd9e2aebe30cac91ba1d4a04420eb7de89b33f8ab14d5eef51ca1e2b375a0abdaa6881640ee4331778cc8fe0fb1959749f3e046b64dd0c4703c28a4a3109a31318aca3e5b18437e4c114790ffc357c5b3416bb9", 0x8c}], 0x6, 0x4, 0x0, {0x2, r6}}, 0x9) stat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f00000009c0)) 02:10:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:10:30 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4002}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x400}}, './file0\x00'}) write$tcp_congestion(r6, &(0x7f0000000140)='veno\x00', 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:10:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) openat$cgroup_type(r5, &(0x7f0000000180), 0x2, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266656e053d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\f\x00']) 02:10:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:10:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2455.425263] 9pnet: Insufficient options for proto=fd 02:10:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:30 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:10:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) openat$cgroup_type(r5, &(0x7f0000000180), 0x2, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266656e053d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\f\x00']) 02:10:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000104000066696c653000162ba36fe5898703030d94e5034a14127f213a0942859e00dde4a2eb89cdc8cd34375264cdc4fff2e4a88d485c0cbf1dbdefa091100708b80a7d66113ca5a0019c2cb525726f77979e30b512cf568e7830db5db1288b718550ff879d1d991b179b57f8960ee67bad833c988b99a6ea45d900"/137]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = inotify_init1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x10000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) [ 2455.662646] 9pnet: Insufficient options for proto=fd 02:10:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:10:30 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) openat$cgroup_type(r5, &(0x7f0000000180), 0x2, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266656e053d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\f\x00']) 02:10:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000001700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000300)=""/152, 0x98}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/73, 0x49}], 0x6, &(0x7f00000015c0)=""/205, 0xcd}, 0x0, 0x2040, 0x0, {0x1, r8}}, 0x0) stat(&(0x7f00000018c0)='\x00', &(0x7f0000004600)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_EEE_MODES_OURS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x1038, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1010, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1038}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001880)={'gretap0\x00', &(0x7f0000001740)={'erspan0\x00', r10, 0x1, 0x80, 0x5, 0x3, {{0x3b, 0x4, 0x1, 0x19, 0xec, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x3c, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x3d}, {@local}, {@multicast1, 0x1d6}]}, @rr={0x7, 0x23, 0x41, [@local, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x14}]}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0xb, [{@loopback, 0x35e}, {@multicast1, 0x8000}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x2e, 0x1, 0x7, [{@remote, 0x10000}, {@broadcast, 0x1}, {@loopback, 0x8}, {@multicast2, 0x7ff}]}, @rr={0x7, 0x3, 0x95}, @noop, @rr={0x7, 0xf, 0x48, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x44, 0xee, 0x1, 0x2, [{@loopback, 0x8}, {@loopback, 0x69}, {@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x5}, {@multicast2, 0x101}, {@local, 0xffffcb81}, {@rand_addr=0x64010102, 0xfff}, {@rand_addr=0x64010101}]}]}}}}}) 02:10:31 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x3, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d42}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0xb, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f3b, &(0x7f0000000100)={0x0, 0x8ba2, 0x4, 0x3, 0x342, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) [ 2456.247393] 9pnet: Insufficient options for proto=fd 02:10:31 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r4 = syz_io_uring_setup(0x30b5, &(0x7f0000000100)={0x0, 0x5585, 0x8, 0x0, 0x191, 0x0, r0}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) 02:10:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r5, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 02:10:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:10:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:31 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1}, 0x215}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r9}}, 0x1ff) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x6b, &(0x7f0000000100)=[r1, r1, r0, 0xffffffffffffffff, r4, r0, r6], 0x7, 0x0, 0x1, {0x0, r9}}, 0x401) inotify_init1(0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r10, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:10:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r5, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0) 02:10:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="9883"]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r2, 0x216c000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) write$rfkill(r2, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r1, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0xa, 0x1, {0x0, 0x0, r1}}, 0x3) 02:10:46 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:10:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(0x0, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:10:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) umount2(&(0x7f0000000080)='./file1\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) creat(&(0x7f0000000200)='./file1\x00', 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c72bc58a07266", @ANYRESHEX=r0, @ANYBLOB="2c646e6f3d1d2d935a0c4c5177e121c319f9870cbdc12636a9bf4fe3401ba29ae466ab799bd065a26f55dfe346df8fc77ee25004eed5c7581c2b0a9b5b884c4146f9994a71d874e7", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:10:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:10:46 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="080000003000af59c545bbe443d10000000000000000009c"]) pwrite64(r5, &(0x7f0000000240)="7e1d3dcac1834c26f4148e1f3bdccfdf00ae9f090967316129b5a5e29f24df7ec5745b5dfe1a595b2ef9fee4b98c528a4ee00ca20be42b9ec7", 0x39, 0x9) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000001c0)) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2004, @fd_index=0xa, 0x1, &(0x7f0000000040)=""/38, 0x26, 0x12}, 0x0) inotify_init1(0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4004, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000004) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7566, 0x187c, 0x3, &(0x7f0000000140)={[0x11cd]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180), 0x1) r8 = openat$bsg(0xffffffffffffff9c, 0xffffffffffffffff, 0x4001, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2005}, 0x81) 02:10:47 executing program 0: ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10010, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) [ 2472.188804] 9pnet: Insufficient options for proto=fd 02:10:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2472.259600] 9pnet: Insufficient options for proto=fd 02:10:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="9883"]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r2, 0x216c000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) write$rfkill(r2, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r1, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0xa, 0x1, {0x0, 0x0, r1}}, 0x3) 02:11:01 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x44, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x2740, 0x2, 0x8, 0x9, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08170000000000002e2f66696c653000"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) io_uring_enter(r5, 0xbdb, 0x4569, 0x2, &(0x7f0000000180)={[0x7]}, 0x8) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xf08aaa8de193b0c6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r6, 0x0) io_uring_enter(r4, 0x710e, 0x2b19, 0x1, &(0x7f0000000100)={[0x4]}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r5, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:11:01 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x78, 0x1, 0x0, 0x40, 0x0, 0x7ff, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x400, 0x3}, 0x10, 0xffffffff, 0x7fff, 0x2, 0x3, 0x4d, 0x6, 0x0, 0xffffffff, 0x0, 0x800}, r4, 0x4, r0, 0x2) r5 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000380)=[{&(0x7f0000000240)="051d2c0a1c2f2afc649c0accbe7be00848f2ec15f52fd85404d9fbcdfa4f0943c3f5d2c9b759202f7c69f43f727b7c1942", 0x31, 0x8}, {&(0x7f0000000280)="34e9932bdce1", 0x6, 0x81}, {&(0x7f0000000300)="ff7c66ff5f1a6083106980db4366569e6ae3c9d4209d8ba457d064f10841b26cc884857f6286d74637d347dff5a7152078b46f17dd1bd3867bc098d959537715f1967e13d1e120d8fbb19a6fdb1460bcb6e3d6fc41d1ed729fb8ae2eaec5ddef993ece0459be29d28a66020fb1c854617ad6668cd1cb6521e88683f9d3", 0x7d, 0xff}, {&(0x7f0000000500)="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", 0x1000, 0x1}, {&(0x7f0000001500)="74152fa991268c78916710ed695bdc7a8588d0824bed68a9b19c10ef30dc85740317df0897947fe48f555faa0d37464831e867ac0742de67b8014b22de1df6aab4ba9c5cc6d92925cfcf10a60d79b14eca961049198e508ddd049a7935f53757f480765f43298d106851eacb304738abb8c2a0b3bb4645a96bc8a86c0f6cdfac19faa8be35a3e07e0a6c826fe233b9c48b136af80923d984152882a47aa817115040af5e8587d1047e8f63d42c136d128f90818cd6f92a2d56817e7ea3e6c20d6648b37aff4a064ed655a655eb96ba938696e63b7962707b005f23b1e2b5f0391fc527932b48776e5da7f0f8f9f25d", 0xef, 0x1}], 0x400, &(0x7f0000001640)=ANY=[@ANYBLOB="002c23402c002c2c2d5d252a932c002c2a402c7569643d", @ANYRESDEC=0x0, @ANYBLOB="b40cd6cb66082d041c62df00000000000000"]) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) r6 = inotify_init1(0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(r6, &(0x7f0000001600)={[0x200]}, 0x8, 0x800) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:11:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(0x0, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:11:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="9883"]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r2, 0x216c000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) write$rfkill(r2, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r1, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0xa, 0x1, {0x0, 0x0, r1}}, 0x3) 02:11:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x7, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000340)="05d8e0679212dd22af34e25120a7e228a036e67ac4912eccdf18663cb40d1968ef0e3c456f798fde475ad361b24765256f2ecf8b7d96fbd20a3340c73b212e1e2e8272192d979b384e5e5621a2d8bbf2bcf68d", 0xfffffffffffffced, 0x2}], 0x40030, &(0x7f00000004c0)={[{'\xa4Uz\x9e4\xa5R\x9bWB\x0f\xdb\x91\xcf\xe4\v\xd6\xf0\x0f\xf9\x14\xc4+{\xca\xde\xc0\xb1\x81\x8c)\x9e\xd9>|\x04\x8a\xf9K\xfcI*\x92d\xe6\x1a\xc7\xc7\x98\xf7\xe6\xd7:\x93D(\xec5r\xb6\x93\xc7\xac*\xc0\xccN\xd7j;\xdc\xc8?\xeb\xefXm\x97:\xcc\xdd\xaf\xb5$\xc7\xef\xbb\xb4\xf0\xa4w\x90\xe4\x12Vdg\xd7\xf0\xce\xd6\xfd\xea\x96N^\x15\xc1\xc2\x15\xf5\xe6\x8f\xdflSWw\x02\xba\xf8MY\t\x14c\xef\x98u\xa3\x10\xcf\x16\xca\xaa\xc3\x8b\t\xd1R\xbe\xbe@\xfd\x10\xbbL~)\x97/WI\x15.\xe2\xc6\x15\xe0\x11$\b\x00P.I\x97'}, {'\x05'}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x8002, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r2, &(0x7f0000000180)="9d48665565986cbdb2edf514111b68e059849b8a34634924dec8be9528e921a7f43d5539a3e31de2a8561fb70355865c3bd92343858194ddbc4d8e03e86615521a7c668032f20179afe7a14cd5a094f92a2a324e47234bd2c5b2d0e7ef66e4ce64413b2c56acd09a1403d888606649def66de5c998e5b71f4a4256e38d12bf0337b4f4495d156ab2bef26fa7e838a7b0296724cf2bb0e2f57fcdf293c614de8f8e5ec9ac80927064490f8981aa29ba01ed01daccec0853", 0xb7, 0x20004000, &(0x7f00000002c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="b80700002e7c956f2d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = socket$netlink(0x10, 0x3, 0x7) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) 02:11:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2486.655422] 9pnet: Insufficient options for proto=fd [ 2486.913761] 9pnet: Insufficient options for proto=fd 02:11:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="9883"]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r2, 0x216c000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) write$rfkill(r2, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r1, 0x10000000) 02:11:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:11:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r0, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x1, 0x1}, 0x8) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x420000, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="5247ce545ed22b213b00"]) 02:11:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB='\x00'/12], 0x28}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="004000070000000800004af3430e008c0024120000000000001414296401010044246253ac0200000004ffffffff000f58ffffffffe00000010a010102070f1b00004000ac1414aae00000020144188b00000000020000007f0000000200000200000008f6831ba7ac141421ac1414aa7f000001ac141430e0000002000000000000"]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r7, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_MODES_OURS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x1038, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1010, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1038}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000009f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009cc0)={0x1d4, 0x0, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(0x0, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:11:14 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2004, @fd=r0, 0x101, &(0x7f0000000400)=[{&(0x7f0000000100)=""/217, 0xd9}, {&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/115, 0x73}], 0x4, 0x1e}, 0x101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) inotify_init1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4501, 0x8c03, 0x3, &(0x7f0000000040)={[0x6]}, 0x8) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:11:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) [ 2500.230404] 9pnet: Insufficient options for proto=fd [ 2500.236451] 9pnet: Insufficient options for proto=fd 02:11:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r1, 0x216c000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 02:11:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) pwrite64(r3, &(0x7f0000000100)="e2c8b43fba5e454f90299415d74fb99b554b14b847b70f1506ec7d74f02ac07083c06422e3ad820cf700e604a0f6b84b88cc42e5d4cdb85e4af0950290d1073f4802", 0x42, 0x20) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x5) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x502c0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 02:11:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r1, 0x216c000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:11:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x1, 0x81, 0xf9, 0x9, 0x0, 0x1b24, 0x200, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x146, 0x3a4000000000, 0x16a8, 0x1, 0xb, 0x3ff, 0x5, 0x0, 0x7, 0x0, 0x1ff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vcsa(&(0x7f0000000000), 0x81, 0x8101) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) inotify_init1(0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r1, 0x216c000) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:11:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:11:32 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) socket$inet(0x2, 0x3, 0x3591baac) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:11:32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2a147ad6db395461b3a7643eb6efac2e20593a2b55d3a1561aa8d1eefd8fcfc3f3a6e4abf2eaf2654e1f4a2b0038870ba760fc2513bab2166d1367a180520294e43994489ad41c2cf446fc581e79e2f0f82a6d8bcd45dd2f24fab738719cc5cb9038c332fad09836ef370b0ebf569d91e903736745c0bb5242aafc9240bc16387687bbe3728ca320271d6dfac7d771363386c42e3abf05495f29f52876cb639cf7", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:11:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) [ 2517.421725] 9pnet: Insufficient options for proto=fd 02:11:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e023d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:11:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:32 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x6}, 0x80000001) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x4000008, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:32 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x4040851) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)) [ 2517.621051] 9pnet: Insufficient options for proto=fd 02:11:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:11:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:11:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:11:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:11:47 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, 0x9, 0x1, {0x0, r6, r3}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17, 0x1}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r8, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000000)) ftruncate(r8, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)) io_uring_enter(r7, 0x198e, 0x1b34, 0x2, &(0x7f0000000140)={[0x8000]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:47 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x595042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x68602, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="74b1832e72616e733d66642c7266646e6f3d00"/29, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,\x00']) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) flistxattr(r2, &(0x7f0000000000)=""/59, 0x3b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x84800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x4, 0x1}}, './file1/../file0\x00'}) 02:11:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = fork() ptrace$setopts(0xffffffffffffffff, r4, 0x10001, 0x10002d) ptrace$cont(0x9, r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0x4, 0x8, 0x8, 0x0, 0x5, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8000, 0x80000001}, 0xe024, 0x4, 0x800, 0x5, 0x747800000000, 0x320b9caf, 0x800, 0x0, 0x2, 0x0, 0x9}, r4, 0x5, r6, 0x2) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:11:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:11:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:11:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000889800000018000000", @ANYRES32=r1, @ANYBLOB="cb280000000000002e2f66696c653000"]) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}}) 02:11:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:11:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:11:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:02 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5bb9, 0x80) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 02:12:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:12:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:12:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fallocate(r2, 0x29, 0x800, 0x800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x0, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:12:02 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x7, 0xa0002) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x800, 0x567) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f00000001c0)=""/8, 0x8}], 0x4, &(0x7f0000000400)=""/40, 0x28}, 0x0, 0x60010023, 0x1, {0x1, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r8, 0x1000003) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, {0x306, @local}, 0x3c, {0x2, 0x4e22, @empty}, 'vlan1\x00'}) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000000)) fcntl$dupfd(r0, 0x406, r8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f00000002c0)=""/188, 0xbc, 0x7fff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:02 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x2740, 0x2, 0x8, 0x5, 0xfffffffffffffcdd, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x0, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:12:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:12:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x4010, r3, 0x8000000) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r0, 0x10000000) r7 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r9}}, 0x1ff) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd, 0x4, &(0x7f0000000300)="1cff24e234b9407fb4749b77a218508c60f79aadde9ed7dea01660f8ef81dffd0587a6609de5091321dda8ae4dfe808a91ba12a8469bcd293cd0cb782518c10ec9dfcacb4dbe2ecd69fa25f6766874075a91376c07e8bbc951384d9367775fe5289892dc68856a1afe14e0102d158bbf40d309c0400e0b0a9ee21703a2ff123b5ade8cf9a868c04fd9e567d8294c525fae7a71d3ce2b4f4281673135c66dec3d8fe901a7b9b79b0ee6dbd15dcf18cdbdb2c3735bf3f385481f81b84a08f86bbaa58991e1271d6e198a5ce953c61d4612562108357df2ca6d3f", 0xd9, 0x8, 0x1, {0x0, r9}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x11) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 02:12:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:24 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf6, 0x80, 0x3f, 0x4, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x100000000, 0xe46}, 0x42002, 0x7, 0x80000001, 0x2, 0x7fffffff, 0x1ff, 0x0, 0x0, 0x8000, 0x0, 0x8}, r6, 0x7, r0, 0x0) 02:12:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x0, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:12:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:24 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x18000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x0, 0x5}, 0xa740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup(r0) 02:12:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x0, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:12:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000000840)=""/18, 0x12}, {&(0x7f0000000880)=""/7, 0x7}], 0x9, 0x6, 0x101) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) inotify_init1(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r6}}, 0x1ff) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)="0d12243b688f94035caa6bcd676eb6a081d7d610ad0388c17a", 0x19, 0x5000, 0x1, {0x0, r6}}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:12:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x26804, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0xc, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x7f, &(0x7f0000000100)={0x0, 0x5c44, 0x0, 0x1, 0x3d6, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x7a) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x0, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:12:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:12:40 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)=""/148, 0x94}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000900)=""/140, 0x8c}], 0x4, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000b80)=""/177, 0xb1}, {&(0x7f0000000c40)=""/162, 0xa2}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/175, 0xaf}, {&(0x7f0000001dc0)=""/67, 0x43}], 0x6, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x4, 0x2000, &(0x7f0000002080)) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000020c0)={{}, "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"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f0000003100), &(0x7f0000003140)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace(0x11, r7) perf_event_open(&(0x7f00000031c0)={0x0, 0x80, 0x6, 0x0, 0x1, 0x6, 0x0, 0x2, 0x14020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000003180), 0x4}, 0x200, 0x9, 0x1f, 0x8, 0x6c8, 0x4, 0x8000, 0x0, 0x7ff, 0x0, 0x7}, r7, 0xa, 0xffffffffffffffff, 0x2) dup3(r2, r6, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="9072616e040066642c7266646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2585.986750] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 2585.990400] audit: type=1400 audit(1735611160.838:65): avc: denied { relabelto } for pid=29628 comm="syz-executor.2" name="UNIX" dev="sockfs" ino=40659 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:systemd_logind_sessions_t:s0" 02:12:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:40 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x7f, @private1, 0xf59}}, 0x0, 0x0, 0x4b, 0x0, "4b0810162f81b5f1d9a57d00b8bb59dee9a36d5ab35bf8b8a62205f848280244ef485e5eb051305a30e4edc6d0a69b2514e5c0f007315e33c5a2e20589fada7375c11d976967f71f28e5fc4a7c4f50de"}, 0xd8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 02:12:41 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:41 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x33a6, 0x9450, 0x2, &(0x7f0000000040)={[0x10001]}, 0x8) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1a7e, 0x906a, 0x2, &(0x7f0000000100)={[0x6]}, 0x8) 02:12:56 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x23c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6b48}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x612}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xef92}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x920}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff000f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x177a18d5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4178}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb7a5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc01}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x512}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7dc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8af4}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x6, 0x6, 0x8, 0x6, 0x2, 0x3e, 0x3, 0x364, 0x40, 0x3d1, 0xfff, 0x1, 0x38, 0x1, 0x2, 0x3b8, 0x4}, [{0x70000000, 0x7, 0x7, 0x365, 0x1, 0x8, 0x9, 0x4}, {0x5, 0xa532, 0xfffffffffffffffd, 0x101, 0x4, 0x200, 0xffffffffffffff81, 0x5}], "a9d9cd8c63992cd311a7e221ed1e90ae1cbce6ed64fe90a79f2d45793f62de7db04b2f4e9b44a8d4f5bd5d221d1849dfc92930f8dfa357c28d704bbb08c724b51596a498e9da48d8f12354e9b63dc392e9fbf3a5cfaf6eebff13ebe2d603bfef3b5b21645e7b08c23dba633ce5b9fcf0b9671b2f2413434a810e8e5b6bbfc0e49f43932dc1b73403fe5ee4890ab55e0a6867103bd6a05ded1e356bd7e211196d7e54b7a3f2a47d91da20a0669090f09b8625a1156ab8b8d06da5b658ea718e91968ce4626e779c9e93110928fa168a59f74cc50b8075822958e8af385cc5cb9ee3f475e21743e3c3b3d01e642419", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x69e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 02:12:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:12:56 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x0, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:12:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r1 = syz_io_uring_setup(0x3a77, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = inotify_init1(0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)={{0x0, 0x1, 0x4, 0x2, 0x1f, 0x8ee4, 0x217, 0x200, 0x6, 0x3c, 0x3f, 0x8, 0x6, 0x20, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000500)={{r6, 0x2, 0x9, 0x3, 0x8001, 0x2, 0xffffffffffff0000, 0x34, 0x3, 0x5, 0x6, 0xfff, 0x1000, 0x4, 0x9}}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000000) 02:12:57 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:57 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:12:57 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x7}, 0x16, 0x3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:12:57 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:12:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:13 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:13:13 executing program 0: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x2ac9, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = timerfd_create(0x6, 0x80c00) syz_io_uring_submit(r4, r3, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x4, {0x0, r6}, 0x34d4, 0x2, 0x3dddd6865cefb688, {0x0, 0x0, r0}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x79a9, 0x0, 0x0, 0x0) syz_io_uring_setup(0xed2, &(0x7f0000000100)={0x0, 0x2421, 0x20, 0x0, 0xbb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 02:13:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff, 0x81}}, './file1\x00'}) openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x100000000}, 0x16, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 02:13:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:13:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x50, r5, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:13:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x0, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:13:13 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:13:13 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:13:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/9p', 0x1e1980, 0x2) write$rfkill(r2, &(0x7f0000000180)={0x8, 0x5, 0x2, 0x0, 0x1}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:13:14 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:13:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:13:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) r8 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r6, 0x2, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r10}}, 0x1ff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r6, 0x1, 0x0, 0x6, 0x0, 0x1, {0x0, r10}}, 0xfffffffd) 02:13:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x0, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:13:14 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:13:14 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, 0x0, 0x0) 02:13:14 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:13:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x28a5, &(0x7f0000000100)={0x0, 0xe0ad, 0x4, 0x1f, 0x3d7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 02:13:30 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}, {&(0x7f0000000880)="dd2a8ba1211740b334475aaa9d2c96e616fd6f8e9273f553bd6950b39af5814f874d1832be479269283d047938d7d8982e2d1a6c1721677be9c0989b114271abbb4caf95182d0bf868bec4", 0x4b}], 0x9) 02:13:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, 0x0, 0x0) 02:13:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x0, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:13:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:13:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r3 = fork() ptrace$setopts(0xffffffffffffffff, r3, 0x10001, 0x10002d) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x50, 0x8, 0x1, 0x80, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd0be, 0x0, @perf_config_ext={0x4}, 0x68, 0x6, 0x1, 0x1, 0x8, 0x8001, 0xe4fa, 0x0, 0x2f6800, 0x0, 0x9}, r3, 0x1, r4, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x5f6, 0xa6b3, 0x3, &(0x7f0000000100)={[0x6]}, 0x8) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0xfffffff8) 02:13:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:13:30 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) openat(r4, &(0x7f0000000080)='./file1\x00', 0x40000, 0xc1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_open_pts(r4, 0x4000) poll(&(0x7f00000000c0)=[{r1}, {r6, 0x10}, {r2, 0x100}], 0x3, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000f30000e1000500002e00000009000000ff0000000001ffffff00000000040000fffffffc008180000000000002ffffffff000400000000000000000000ea54ffff2100050001000000002500"/96]}, @devid=r5}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000180)={0x3, 0x8837, @start={r5, 0x0, "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", "abdbc9ec43f7de2f82204c8e9359cff2e89de1450e570137afe1d8bb8f5953ac1a824137e8b542ecd378fa84749ea51b14e5616ea6322514c9e68db464810ad254cd8cbaa34a594c1956e8b67b9214393566bd3a48a18d29c773f39115f14c8359bb56734371602c7e0a80cbea5015c2796cec75a9454ad4b1d0dc89172f7b099187a8d71d8bac1e3ff7c6bbb77622b46d100194aab968cde374ccab786f1d47d546d7c00a3cd1160af14c57a3c26d276be13336b3082d3ad3fe3da4c0684511add208294d967f98b143d70d569c16776ff7a792f3c748b43f27def154af407898435195089345e0ac32209dd45a6d5a9c738fee1a7943f11857b3d7f5cc14bb0b3eeaab95a3ba18798cb16a64765c976cb0d7b2e60fd1f266b09e84a75aad21aa34f78195745f62e1508b5258867663ecfabe25fc536a2ba5056cc6d432d7bac9bc2277afc70c19b03bb13000edf71960b27f5d58f391e34dfcb46ae182e1e0ed64e900453c8b36221a491a94c8ad2eb6b54eac89d094b79ac405901d2aac7ed8f0c70226eb38f9b70aa54ddcdb73da0842f0ff3d2d5c1f8d64f67494e9d761c451a65aee0b366fbd88bbc3a045460f982b8a956b8428c61ccd3c326736ce950fa63bdeca9772ce9fe92290ca96e983cfdb54dd8583ea8bc4639b48798ea7c97bcbbe671f5d3631bf77efb0280f5ff5859d526c2a4f7d65e5e93d1508538a0dc5b6f60fa0771cad04b983cb570ff83ea61d7942aa69e75c12f928d2709721ecc3a0123ec86d5929cef8ace2da073b7f9b741fdf6c54ef09c7e6ae0c5d18b5709e1c44f659058ff888b802de997f6e9f03dc6f00116172a831e65b950de866a3f4299fc354362214049a8a48c4b174ca7ecea9f75847743b17fbd5d974e874c8b1f8ed3761cbbc682f94497a2fc345c164395f6d344cff01df45bf0acee6aec8a795fd944a96797576751b7106a9220cc7828ceffc7c34fee2b11ad1b5edc99fcaee9ece07ccb1a6d09c9827837df84701fb1be523146b249e7b733ac045a07b0b78b2716832a12a828a1f53bf9b4315da7c5f6921882b1aa68c23681f4657343c5d5e5ca9fc6588563141e1d7757af5eef9ecaa18cdb1efac425d44349d20a610ae46c6d82a02999fea077f6e870f91e46b32050611219851ace900911a7fd4c2ec092773b2359b3ce8838266ca7252e32d0a5f709df6a7503b8ff8abae3b7added8705a3cb79ec34e250c00c6a7fd353cbdc85d2262889c4a21e32a271d21ffe75503f6bb7a9568ba24d2e5fea4b61c2701de98bccf6626d9c5a1dad067e0f7d86b00e344066b03d9176c0f7c5ff0e7b27f35687db7ac6722be0fcf3e78a0f70b182d22c87b257182ccbaf9a631c8055199b279e9b834b6bd62db6512ffcd137c8fd42d15c0d232f44c84f163320a9befc78ef9ec4522f8f78feb43c96fd0766"}, [0x9, 0x79f3185c, 0x100000000, 0xb213, 0x3, 0x9, 0x3, 0xbd27, 0x6, 0xcf4e, 0x3ff, 0x40, 0x100, 0x9, 0xff, 0x0, 0xff, 0x0, 0xd6, 0x7, 0x81, 0xfffffffffffffffc, 0x81, 0x80, 0x10000, 0x5, 0x7ff, 0x9, 0x8, 0x9, 0x2, 0x8, 0x6, 0x8001, 0x3, 0x20, 0x2, 0x10000, 0x7, 0x7f, 0x5, 0x40, 0x6, 0xff, 0x80000001, 0xfe4, 0xffff, 0x7, 0x5, 0x7f, 0x9, 0x0, 0x8, 0xc3eb, 0x5f7, 0x0, 0x2, 0x3, 0x5, 0x800000000000, 0xfffffffffffffe8f, 0x3, 0x9, 0x8]}) 02:13:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, 0x0, 0x0) 02:13:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:13:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, 0x0, 0x0) 02:13:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:30 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x95, 0x5, 0x20, 0x0, 0x8, 0x40324, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x40, 0x10001, 0x0, 0x9, 0x4fd, 0xfffffffc, 0x7, 0x0, 0x8, 0x0, 0x4a}, 0xffffffffffffffff, 0x2, r0, 0x1) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x190) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:30 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64, @ANYBLOB='Gwfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 02:13:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, 0x0, 0x0) 02:13:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) [ 2636.129371] 9pnet: Insufficient options for proto=fd 02:13:47 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, 0x0, 0x0) 02:13:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:13:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:13:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:13:47 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180), 0x8) 02:13:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6(0xa, 0x800, 0x5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x88e6bc0b67e08174, 0xa8, 0x1f, 0x4, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x10, 0x4, 0x1000}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={@private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x1, 0x0, 0x400, 0x5, 0x20, r2}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="a66ee7bba56b72f5819b7fdeaf465c35d377ef3111179d01dfacf386a7deece86e13760cc59c5a7c006e07656ccd68cdf75b3a7926339619dee36a4ba50c1722e225d483fbe157d8d0de80959b20c68f255728e02474b8511b7db04fd0cb881a5991acde0a804bd378fa4abef757e3af578513559a53d3f35ece02b06f747b0bda83f208abc6e015d755c610e7f359a418cc601cab68cd11382004aa6feb3999f21cde82f8ce4df9f6d3e2007e810723be25c7b2d2bcb987e37c78574a91064df1711854333c625fe024e9c29071c98eba2edba0a562b5b775797a2fa8b161456ca421caba94e8beacb525a67869f407ee1aced2eced6f54", 0xf8}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000440), 0x200108a, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@uname={'uname', 0x3d, '/dev/rfkill\x00'}}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x38, 0x37, 0x33, 0x66, 0x64, 0x63, 0x33], 0x2d, [0x63, 0x7, 0x36, 0x32], 0x2d, [0x65, 0x32, 0x64, 0x64], 0x2d, [0x37, 0x36, 0x33, 0xb], 0x2d, [0x65, 0x36, 0x63, 0x32, 0x38, 0x34, 0x62, 0x66]}}}, {@uid_lt={'uid<', 0xee00}}, {@appraise_type}, {@fowner_gt}]}}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 02:13:47 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x1, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:47 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}, {&(0x7f0000000780)="2163e86febeb145c509e6ff190a901709900956a971569492b6811d8e1f0d8c5d0e65154ff07abc91af35b7f41b75d0a135d826c7a7ed11c57f0df2d2a7fb45041f6673d2f76f475bc4f9f84d3120260df5577c251ed2c1fffc776904a61e4e40f9b1997876731fe5abc09785030d9f86df21afee253366e605fc9e1adf5e13634f97abd8fc9918f51750496e82dba7ac58c4b3a2555a866b2fa79d3fc90e1bc52d83b9ea59393c761c6d93adab1d38253c7ee486ba7102ff9390f43ea9da6352fcfadd1793007c49ab45ead9a7200c1637a397ef9f8ef6ea55565c06ff743201765ee89", 0xe4}], 0x8) 02:13:47 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180), 0x8) 02:13:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:48 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x76, 0x0, 0x1ff, 0x0, 0x1, {0x0, r9}}, 0xff) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:13:48 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:13:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180), 0x8) 02:13:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:06 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}, {&(0x7f0000000740)="5fa7deb64baad440c1b4c2edb1857ed82b47", 0x12}], 0x7) 02:14:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:14:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:06 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(&(0x7f0000000080)='./file1\x00', 0x80) 02:14:06 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1000003}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r7, 0x0, 0x2) pwrite64(r7, &(0x7f00000000c0)='a', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffff, &(0x7f0000000100)="4e38aa1d2bee2b34a9241bb019eb998a7026206c020d612ceb1aab1a3265718a97b80cf203c2bc4a1b2a0cd1ce1e26ae1b9dabb0ec93750db95743b62fd3f1bd337e9aa1c44f8c3ab2b615ad4673129de903232b088f57893a42f23be5b1c8e9ead72c601f35c133d049f9088822aa8c21769cd83eee592ab284842ab4a4ef0fdb9a54ec2b456a7a7ea1549f677af74ded3007ca5986b1235cb3f27cc912cd3b46ad01c294ed1087d78421dee8ac629c535aef3b09750a8a33bd006d89c51f4ad713ae23de6f1d3fe842cf41624e99e937ea96b7d2ce67dce6590eaa0c22b71f2392431fa4530517028ebf78d6cbe51a50ed57333b4491d0", 0xf8, 0x9}, 0x4) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000045c0)='\x00', &(0x7f0000004600)) 02:14:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:06 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) syz_io_uring_setup(0x434d, &(0x7f0000000080)={0x0, 0x5543, 0x8, 0x2, 0x26c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:14:06 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}, {&(0x7f0000000680)="260134b32fff84136bc7f788e5e45ed0236616e1a1910ad238590c25749a7e72d28816b3fafc3904b2e4bd70e6616cedcfea292b8e0e9c5bd51ddfc06f699565fe18e96191882e6ee72817afa2c3b488e6f4ffe72b4eedadec7fbdddd020bfa2eaf89153be30b091d0c374590192b8c5156c44a20e462a30160e2114cf29db4a47e7ee448719765be7a31c7a199f2cda6a700a", 0x93}], 0x6) 02:14:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:06 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}, {&(0x7f0000000580)="0160b2577a45c62d11f6501f5f8a5f03f53c461a08a0e4cb912adf91feffbb7ba6f2ba4280134d75071ea5df5934cd8c9a9b92b4e61c4b897f58e2164f67edad19d0c9cda830d6d2e84fff9a7bd7d9965102842c075429088ff8f394927492f094052a285e83625eaba34393616027009097fced1cd371c8a46b0cd8cba5fd071419c391776af434021a86aa3e93e52a3a868a5f9491535b3252e86006ac44c31367e370828f8c7bc977a2dd00e90c5a1ac6d8022e08900bf07b3837f26f1296f9ad5620f4e51b0d5b02f779cfa1df8916a2d2492ebcec601d8b", 0xda}], 0x5) 02:14:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:14:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:22 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) r5 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r7}}, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="1107a17a885fc7475e11243899e542c702447e66e5cc2f770283f2cbf389fb30596ea844d4e0d8d47b6b34", 0x2b, 0x880, 0x0, {0x0, r7}}, 0x6) r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r10, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4004, @fd_index=0x2, 0x9, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x7) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r12, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = io_uring_setup(0x66c5, &(0x7f0000000100)={0x0, 0xccab, 0x20, 0x1, 0x1af, 0x0, r0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x86000) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000180)=r5, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:22 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$netlink(0x10, 0x3, 0x15) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)="0b199c1237a875ce03b255ec78bdbc4be27baca3f0d9734c8335041d161eaa95104e45e40dffd0647b900efe54dd9618a77a0e5cf285f41a3b4e2d8911aee08500301419", 0x44, 0xfffffffffffffffc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$revoke(0x3, r3) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) r6 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000540)={0x0, "86332d317234fdae8863e429d15a541d23c131f9e31ac62562ab9e9c56e0ba6d087640dd895c08c742c72d2132c2dda7568952fb1f98ea34bf361e1ba23f1760", 0x29}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f00000005c0)={@id={0x2, 0x0, @c}, 0x21, r6, '\x00', @c}) keyctl$chown(0x4, r3, 0xee01, r4) r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)="0b199c1237a875ce03b255ec78bdbc4be27baca3f0d9734c8335041d161eaa95104e45e40dffd0647b900efe54dd9618a77a0e5cf285f41a3b4e2d8911aee08500301419", 0x44, 0xfffffffffffffffc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$revoke(0x3, r7) keyctl$chown(0x4, r7, 0xee01, r8) sendmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8a3746914fb5779281d5e1050d8afd5ac52ee55b9974568cf28686f0ef861ddcf4b5fdd65584ad0635797ed0690fe4e7faa763cfc13bebb330ed5edde8102aae74c73cb523e7cf5000e7542da82da5d553a52d5e2187a47789134ef8d821028b8c01dea5508fecebf7739c950e0a3702cfb53a192736d06beed79895725e2cd3a49b1720b93b", 0x86}, {&(0x7f00000002c0)="b3c8fb0e1a83ef46ff85a53415c4742a9820ff1214f0c3d9bf276dbb2c00638f6b2edd1c0a088a93c4faf9336dc77575a193cffbc057b99cd31a0891410bd7bb50ed20c8d9f1ec270f9271f0426bca97c41e7afe14e465e91d0097902eab53a9077681495ea067aa6854f2", 0x6b}, {&(0x7f0000000340)="68967a60dec3627aaf33673c7cfee0c59db57159509c1563e61eaaaf6007257dc62d54904bfe6e595358a05865ee4764379ef0583b6061760750d54ae00ebe3eda1853f95722930701ab4750a38851350799e423f7b83c04d498b3e34be072e73c30402603c75b2eb125a87a929c380397c7635e7731dbf185f7c63bfd8fd9eb708a9645c4cc72f2b22ae09570c25b6d2df0", 0x92}], 0x3, &(0x7f0000000400)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r8}}}], 0x50, 0x10}, 0x30000000) 02:14:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}, {&(0x7f0000000540)="94ae786448b1ac42ec593b174c84b71f293bf952e4f5fcefb9b672f1dcb1b98d1ccb0861a07deae02ffeef2138eb", 0x2e}], 0x4) 02:14:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:22 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) io_uring_enter(r5, 0x52a9, 0xeeec, 0x2, &(0x7f0000000100)={[0x9]}, 0x8) 02:14:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7457ac6e642c726524db5609", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9883"]) write$rfkill(r1, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:22 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x301401, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="002300100000002d71db4456e1057f15e24525ae59fd4d45e980ea718470c9d32c8a094d3c54defe5fa7e666a95112444898e44a8e7b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:14:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}, {&(0x7f0000000240)="50a222a9dc27d305221057be063ac10999ae290796071c64d9b867d87b89ceeac55f350b9e7217cb", 0x28}], 0x3) 02:14:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) [ 2687.994789] 9pnet: Insufficient options for proto=fd 02:14:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:14:37 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}, {&(0x7f0000000440)="dc40e8714bb5e4a9f5518dade9035bd819935d7245469e8e895d9b4be754de8833e31098d5f6e8f4436c855c336b6c6c6f67c9011ac291c4c4c624941ddceaa728d08139d5aec60557f5f47561636edd4a42e7dadbafcc1014ae3516f22ee04ef37289a63845d8fb78c4b80c357f7f32e84c299c7e20618d8985ed402e59c2d57259be7c6312206e5f488a562dff31977b65fd7be4edd7d563002e8b4d825b477274b4fe6c9f00fe8457dff49bd134ce7e97930bca9c7de80ffdd519542750abbf3506ec04f78485632555f22db31e1c44d1f975cbd81e8a4075b1d3be013328f7af7e8ecaa0d30afd2509da78cb1d6d30756a341984831208", 0xf9}], 0x2) 02:14:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x1f, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x1008, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x787e, 0xb92e, 0x1, &(0x7f0000000100), 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x3, 0xfffffffffffffbff, 0x0, 0x6, 0x2, 0x0, {0x0, r5}}, 0x200) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r10, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r10, 0x40086602, &(0x7f0000000000)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e20, @broadcast}, 0x4, 0x1, 0x2, 0x2}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000002c0)="e8c40b23dd234062afd3142e03ad9fd529b6b229b7e3d72f83b4729f54828f021e8036dad9c8c1d67185bc310ea2ac9f56490e8968ac44664390cd813c151392c492b347b2c470cf4a49b7ba4f3e1fbc659df766f055101162384b3efd9c320f868ea7be99b30d02e41e536f1ebca10b155cdf78fddd931f1e94d5ff9f637a3b5a8a9e9af8df8153eadff37a2567fd7ec75c4c28192c6770a4de42d7", 0x9c}, {&(0x7f0000000380)="7ce6cea086bd11db62f2a70bbc43cee6e4d51b6b7c9f0c31ec86afc1a4e7041a6575601219cc2caabef37a3e1445f8a596614b3ba9be8ab7c7caa33c837eabf05f3620d981af7c156d6bc9140de5063acdf6f76eb1c8f47b06d8cf97bcc57aee3c8f9407e43e512a7b4c325b49337f3231c0a542556781263a91ecabee62a928502b6a213b5055f538ff3e8c34540b3e066a6709b5", 0x95}, {&(0x7f0000000240)="afdbf56e19178b2f0360b1359d1dcb6f0b0407c3b496db5fa45027fb", 0x1c}, {&(0x7f0000000440)="2a26191808a9730bb821d16d2b28197cb47f15f97acd25ddb13f2c104cbecebf6d6963faf033a61711b03d6d43524009508ed9e6ed84baba625418ac289043bf892f66c70487c983e44f8186cb1b5621d8cbb43f3e065348ffa547ea6176dcecb6493eaa", 0x64}, {&(0x7f00000004c0)="b7d57a1106c7a094847d7aa304abc521b8ceb01c7d80d9d9f58ad6747d2c9ee331c3a04a7afb8db3e9e8d132da36798d9a64763dd49329be1004b6af3e2a3c88264d390df7e6fc437a1e5059e5e11c7b4e1271688a596febc616bea679230629ad1eaec6", 0x64}, {&(0x7f0000000540)="4eea3770641887e355e369ae74f127fd8b43635452fdeca69d644df65ee381476869c6d96410fb9aca15c3fcc2d8036e35eeb29c69ed650e23237848685b4ad807dfc6daf92d470c5612e1e1d88397e20bf1ab38338899cf50b4e0cfbf63ea25878f96deee202bfed552b767fa4cf6abff8570941ea6672a99cd4d27e6ccf4da54b48ed4781e8154c6e8404aed78ecbb7066323a03ff7e3ca386578634eea8fb2aeaef9a679219c99a06c3ead7f17fc47e27a39c0f78034a299cf3293bbb1778b95b4975b6", 0xc5}, {&(0x7f0000000640)="06e0af8bfd96a215b91b5a8caf75b13d7222164a44de5b513b9a72f65dbafa6e0b6f0a2355787386097466a4001a89c92096b388d17ba4269c96850938e58d69ffce447ff90142365006b10113a19c058f", 0x51}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="d77aa0b0cf1d670bd2add73244eecc944a3ce3709fa9fbccc014b8525291cabd41bf6069fecfc536998e565539edabb0b25a2e1957c7a41baab67f620d4cf9bfe7370129ab76c0bdedda8fbb4a37c919c4c1a43e72d35d394389055517182fea14766e91749ce15afe06f9719d4ee2b0933f7f", 0x73}, {&(0x7f0000000780)="81c7f55f7f0a11b718a1063825e548337ecca31954c5849680ad76ba9754529457c6bfe1abb601571a43c0ceceb57d82fdfdbd048cf00bd5644b5a37428aaf3cbaefc1d5ea303111c8b2f83791e70eccee7b048672c85d35a655373df1e3b1a107995f25e0ea1c291c19080b86ef0aa9abdfab81ef46d00551547d1c276cf9866583719bc36f8efaf58ef62039d7e3db4a1a29a0f3bc8074627731e87e565f0d47a393f8fa113f3bd5c9d8c45a34c9848a18480f2729baddeb39a808d51e1077f3cc5f47ac041bd16671ff9c919e7d6f4e88718d1f2dd6fe74f64a2a9b557ba862675a522886192db911812e", 0xec}], 0xa}, 0x0, 0x4000810, 0x0, {0x0, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) fcntl$dupfd(r4, 0x0, r12) creat(&(0x7f0000000180)='./file0\x00', 0x11c) 02:14:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:14:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf87d708be8f8506b8ede8469e1064ec4c013e3ba61c5eea4b6ce3546bef5c6ac826223d26497a43f78d2a11ec5acec8f1f0061e808720cab91bb59b8ca846839faff7b76698b8ed435c1d6bbe288c9521cf88962ef4d8", 0xac}], 0x1) 02:14:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000940)=""/4096, 0x1000}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900), 0x0) 02:14:38 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:54 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900), 0x0) 02:14:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r8, 0x0, 0x2) pwrite64(r8, &(0x7f00000000c0)='a', 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r0, 0x400, {0x0, r7}, 0x2, 0x14, 0x0, {0x0, 0x0, r8}}, 0x20) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="24e2947766446e", @ANYRESHEX=r10, @ANYBLOB="57c9a1b0381ef7d2e00d1228df71ff3a04782af93d8615608465f134b52dbbffb4c4035ffca3e22fde088f0a33217753b6c8fe014c34"]) 02:14:54 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:14:54 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x0, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:14:54 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x353}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:55 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3d7b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x40010, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:55 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900), 0x0) [ 2720.255307] 9pnet: Insufficient options for proto=fd 02:14:55 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x2010, r0, 0x10000000) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x1, 0xce, 0xff, 0x1, 0x0, 0x6, 0x9000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0xffff, 0xced}, 0x49451, 0x3, 0x100, 0x3, 0x6295c0f4, 0x2, 0x6, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x20000000000004, r3, 0x1) syz_io_uring_submit(r1, r5, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd_index=0x8, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)="ac982a06", 0x4}, {&(0x7f0000000100)="c21801154042eda3eb814b7bf54631f3d24aaa43e798fac2755dc78fa92910bb1572ce47cddfa591691a64a7e72c20cfd987579cceebc769b0728f1ad81f17636e0401d9613012d02a8622a20163526f28ab538a2888503d5264de7f3df1b8b6", 0x60}, {&(0x7f0000000180)="39970dab645504cb21e915f1614b6728d1b226764628f83453febdfa922a5b313139e3284a752e6d056e461f9c403326c7323cf1ef591248be268ae29db07a7b087a3affcb", 0x45}, {&(0x7f0000000300)="4ab863b219f6292ff768a73f8b03bdd24489b01dbfc27d45e29dbbc0568839c332bdecde774f551c8d8cb2de969d2fa968169b41b83e7dc215d7f2ea2a3718eb321753762d25d61a6b4d4fced1826bdd3b051888f2170f8540ec7d77200cee36bc3fa13fa8f0a7d13f7e400d10646c0a46c56c9e6bf6fc5e9b60f8c6f73c57052e97cbabc4b1c256cfb49ca8174a613497905f143d5f8160c784dfddde3b4e56399973013b997a6714b3c38fdd7fbb7f74dd12fd63b9a444e60c6a69478e8db9ba5385906856b294ce6e0a97bc9939b3421058cbdd6d7c73e9", 0xd9}, {&(0x7f0000000480)="bac8a164d5d820188061e35066a239b0a8100862d033357697517f51bc8e1bbc55de012d21a47094db4ed75ea41b62ee98f4fd88899a7ca8afa61bb55a23c476c4b4d16c341337cacd2073a1c2332b91b6d2e93c7a5e47934787f26399b9b795f2c7bfc6c2789080d1d92133456c01cd928a305bc30e44e0a52479a03f28b976c5dede1e1c82617c867c17bdccda379c3abf61ee6018efd01106ec60d3b65b7e6ca4", 0xa2}, {&(0x7f0000000240)="e84401b1765f2d8554c680b1392307bbed05a9f3184140602841f832a3a183aa653f94e6e6cf", 0x26}, {&(0x7f0000000540)="3b61e18bd4785c4d42d4c3539b8fa856a1677a5fca3675bb0e06cfad64e82b7e062ddea5551c63e46441a6da25fa62ae149c01d6fde19a6e3028a564c41841d4ff24522d58bb3cf4ef83868462bdb297b40ada2f32aa633385a49e43a5097944de590ebabd816b135c26f3529310f5b2c7c6449cc01f729e8bddf417ceed6880990a9fbde8246af20dc9f42852a4dba55b7507e53fefaac07ee4d37badba96d5aba7ef040f7eed4d5a2d314c542aae7f6cccb0a4647b1426c15dd7cf547109e767457a82b122", 0xc6}, {&(0x7f0000000640)="213e03c1fa5a879a8e25748294ac4df7661f66227aec8694f21c9b4e5c80c22afc402e397505773ff1b8c925551e0f6432cfc933ac8eaff7137b9e81dd88c2ee31abf56c10b6933e5c6ecfc190b8fd8cebc56a24da0ee964b1cbe66911fce15979fccc0cff482445fe6935aa84b42e9029f26831f5aefe562be7630b9572fa826e8726c48c9d20b2dd60a1849155aff52a1d01ec76717526928996afa78876", 0x9f}, {&(0x7f0000000700)="43878b15e4ad26e79b7478d4f0a4c47da6e6627f004a83607e4f0230ca69694a718ab825232354d34021befc8b0a8d2ad879b9461556048510480f22df37163552cc6a48b1920186f13231225ee2357c08aaf946106e04c1ad2ded1590", 0x5d}, {&(0x7f0000000280)="f384ae", 0x3}], 0xa, 0x0, 0x1, {0x1}}, 0x6219) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace(0x11, r6) perf_event_open(&(0x7f0000000b00)={0x4, 0x80, 0x20, 0x3, 0x7f, 0x6, 0x0, 0x0, 0x40482, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x33, 0x2, @perf_bp={&(0x7f0000000ac0), 0x1}, 0x40200, 0xfffffffffffffffd, 0x9, 0x5, 0x800000000000000, 0x80000000, 0x5ac8, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, r6, 0x3, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x45f3, &(0x7f0000000940)={0x0, 0x4471, 0x2, 0x0, 0x298}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000064d000/0x400000)=nil, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) syz_io_uring_submit(r7, r2, &(0x7f0000000a80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x77359400}, 0x1, 0x1}, 0x8c1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:55 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) [ 2720.293895] 9pnet: Insufficient options for proto=fd 02:14:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:14:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:14:55 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{0x0}], 0x1) 02:14:55 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:14:55 executing program 0: clone3(&(0x7f0000002e80)={0x82300000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x3c}, &(0x7f0000000480)=""/125, 0x7d, &(0x7f0000000500)=""/87, &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@empty}, 0x14) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0xa, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r12}}, 0x400) 02:15:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x0, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:12 executing program 0: lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x8, 0x1}, {0x4, 0x400}]}, 0x14, 0x3) shmctl$SHM_LOCK(0x0, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:12 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{0x0}], 0x1) 02:15:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:15:12 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{0x0}], 0x1) 02:15:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:15:12 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:13 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:27 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:15:27 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clock_settime(0x2, &(0x7f0000000040)={0x77359400}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000800)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xfffffff9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000840)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_uring_enter(r6, 0x37a4, 0x2767, 0x0, &(0x7f0000000880)={[0x66]}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x200f5ef, 0x0) sendmsg$sock(r5, &(0x7f0000000280)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x1, {0xa, 0x4e23, 0x7, @private2, 0x7}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000300)="c4a9cc2c2cb062989d06f14d962a4b293a7718646fc7f2941c3bdb5a710d0ffae51967a79b5dc2a9a37bb27e75b4cc5cb69ab818337bb9184c1f8aef980797f734b80c009069edeee6fcec2d4f3ac75141d6818f94e4faf678360457106b6ffff812bc9884f12fe45dad4857c1799dd049195604e8f4ee5aac032527427a6cd092c610c22ca3e7c23673e525e7a63780a7a1ac29350fc2fc826e562599ed", 0x9e}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000480)="46767b2cf231a4a97bb7ee7c64c0e5a7510863fe0ac7cd696dade82f40bce10395fbbef84be30f1a257165823f6842b92637d3c4b2792484cb452b429efaa6ccaea95e278cc083642c07c3d1ea41667e54a6bccefbe9f37527210dd5e76cf3117e26c0475061d704194f6ea345d6332029fc807272172b2d88c804b25a0e5edf4e8af8befc17f6e3aaff95b9173f9fed9dceca30e808c3b05eeab1b1eb0b30cad03a3c36cdab0bf2", 0xa8}, {&(0x7f0000000540)="ba0df32aec3d87db6b6c0c5f8f351d78249c879fe638122a291829d9bf9fd4657d0057dda3c840755b5fdce95d05b49e115ff9a01aef8493d8d35c675f9faa5e139869229690bea9dfd4f0d654382b9cd15865b77c9701881881b26a4faab1e01d15d2074bf5bbd4dee9c887538130126e15af1880399ede9d0c33bc9393b47db8a10cfe5ebe533b4457984708366493fa3ae8a169d0417bbe817fc4b4c5c1b0a205ce39971a8eb44810d768aea2060c50c332955f05df64fa67992930b3523031e8f6ed60cb9d5b58b473378c103d902ad39070f6", 0xd5}, {&(0x7f0000000240)="682bb87497e757a77fbaa1ddd005598ca89a07", 0x13}, {&(0x7f0000000640)="243c288e0d4d3bae6c819f02788fdf3b02e1d131cbb21fe99f4323127518bec6d6381e5e79d5a71dc26d31bfa7186bb7dacfe3dc778ff51fd02500f3ca625cc862cf1843ecc833271493ba5eff38b8e5b0c4bbf6e1f9fa8372e2252b843c3a10b3aaae3ed575ea7f7816ee4bc10a2b0ac78219941c8a06114bfbe9444e2ca4dc1d4f7955d5fd47c8a3bfaa913c389200212a121f4b27560d08e7b3e078913ce5bc678808434c10cf995369c904b61ac385e0bec16626dd245f83620d225ed636f9ca303aca76800e96baa67ab581e36591837010a9d9e76868de6fc1340396de9c8171edca", 0xe5}], 0x7, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x6000000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x4000000) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x6e, 0x2, 0x8, 0x0, 0xfffffffffffffff8, 0x1000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x2, @perf_config_ext={0xbd3, 0xfffffffffffffff9}, 0x48000, 0xffffffff, 0x7, 0x8, 0x3, 0x4, 0x6, 0x0, 0x3f5c0}, 0xffffffffffffffff, 0xb, r4, 0x2) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x20, 0xad, 0x6, 0x0, 0x70, 0x8000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x3018, 0x1, 0xbedd, 0x5, 0x401, 0x10000, 0xffff, 0x0, 0xf2, 0x0, 0x300000000000}, r0, 0x10, r1, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="000000008ee3486984b2ad5fe21834fffffddd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9000000000000001e00000000000000000000000000000000001d5b5231b5a015dd00000000000000000000000200000000080000000000000000004c9b00000400000000000000000000000000000080040000000000"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) pipe(&(0x7f0000000140)) fcntl$getown(0xffffffffffffffff, 0x9) unshare(0x48020200) 02:15:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x0, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:27 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffd, 0x92, 0x8, @buffer={0x0, 0xa0, &(0x7f0000000080)=""/160}, &(0x7f0000000140)="d075312d80e73ebac988aa2ccc3e6f6d73de4d0863ebbf19c1b4028f67f9e60541a05e7b087c5104af4fb60c827b7f3ccd90e2062d9579d242a1dffc1b11de5b099e720be3f3c479efb105045d57409ba31eb9bada3b2f65a6cc0e00ab0ddfb537c750e9b07962bd2fc7e05b57f4698e685824073fd616b7fc133f84714066a51f316af107937ac694a7795b273e057fd3a8", &(0x7f0000000300)=""/124, 0x7, 0x10020, 0x2, &(0x7f0000000380)}) 02:15:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:27 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0xd, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) 02:15:27 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:15:27 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r4}}, 0xcc) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r8 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, r10}}, 0x1ff) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r7, 0x9, 0x0, 0x0, 0x16, 0x0, {0x1, r10}}, 0xffff) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e3c853c4115e6d5b4b0c9c80d0caf4615adc0d352280a5b39e277e2a3ef0969be66a816c05e5c462c73cccf", 0x56}], 0x1) 02:15:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:28 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:15:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:28 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x48) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x25070e860bd73e0a, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x803, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000100)="685176a74199b1a9315c3a8f1f76d9d3192c63d20c467566e9df05b683f880321ea6e1fa4f1a300fbf998da3633647f80fd76b261e1fa9a92094e47a63a1bad02edd613583a1146ffa71bd78e3434631b4460a7f927fd20ca83ca06751a05e75d9bdcf5d4bda393d1841e6f8f15a97b2311edecf3c3dcea5acb7cf0a117c9b26154a9c35b8a245a191455eced77685668511b381879647e415cb9d37079c0d17", 0xa0}, {&(0x7f0000000040)="1382969ba8578569c45ca2fbcc6ef8213dd09a14ec0559467f56ae03e51979246c2ba02fe704aeb2b38cfe3976a4ce", 0x2f}, {&(0x7f0000000300)="3f5a5d44083150f24979cdd9cba721dc5f7fdec9f24b29a8efb7a91667f6b45692996dd8fc3debafed0886dbf8480053a167a4c30164d2e2eb238b87ef2f867c733939cfd5dfc38b1c90a02e18282973e1bfc3447230900e204fd25508385260097b6ec82ee52d97622666ad44e1e41252feb7a867a94ba4beee25fe44047a3354355d5484b912b2fbfdbd65df66a09693998657eee3acdcd2f787d925432b4e9983fece54ee3492b1adb61d904317a6d7177772c3369b5319e3230056cdb219e18b473e4a90d01a7f94c57da6c3d8a01ac110085fcaa7d6e03fb9d208dd4e4052ab6244d061fb7fdbd4cd34711b88067887a06d55b139", 0xf7}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000240)="6fe2f6143a2dd55414dad0b99a46eb35c9e02c24", 0x14}, {&(0x7f0000000480)="8bddf455009a5dfdb197e5d2e489f8675a241caa24d376dddc88549cb8f9045c96c771fafe53d68bbe40fa4c11b07f6f47b6412a12a9f1e7977dceb60d9944fc7207b50635e272ed24423415f32285bc2812399131155e12cefa6331e0ee36caa6e9f0aca9db45a3f0426cce273e75e4d59f1c485c04b479276f9c6f47d46c1503b754ba9dd91db0ce", 0x89}], 0x7, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x0, 0x3}, 0x8) 02:15:44 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x0, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:44 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa2002, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10, r3, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) inotify_init1(0x800) r7 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0xffffffffcb79f98f, 0x0, 0x8001, 0x0, 0x0, {0x0, r9}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, 0x0, 0x0) 02:15:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace(0x11, r3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x7f, 0x60, 0x7, 0x0, 0x3, 0x95044, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x5}, 0x1000, 0x507e, 0x7, 0x1, 0x40, 0x2d, 0x7, 0x0, 0x6, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa2002, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10, r3, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) inotify_init1(0x800) r7 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0xffffffffcb79f98f, 0x0, 0x8001, 0x0, 0x0, {0x0, r9}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, 0x0, 0x0) 02:15:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x8, 0x3, {0x0, r4}, 0x5, 0xf, 0x0, {0x0, 0x0, r7}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x0, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:15:59 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, 0x0, 0x0) 02:15:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:59 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff56958b83a888fe17037e4a77f9abd6d2dea105838eb59e", 0x2b}], 0x1) 02:15:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:59 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:59 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 02:15:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:15:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a74, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x356}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r2, 0x100000001, 0x8, 0x809, 0xb, 0x0, {0x3, r5}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = fcntl$dupfd(r2, 0x406, r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x3, 0x7, 0x5, 0x0, 0x3820e9b1, 0x4a14, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x44200, 0xd088, 0x100, 0x2, 0xffff, 0x40004, 0x7f80, 0x0, 0x5a6, 0x0, 0x6}, 0x0, 0x9, r6, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0xbf3, &(0x7f0000ffe000/0x2000)=nil, 0x0) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:15:59 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:15:59 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) (fail_nth: 1) [ 2784.576267] FAULT_INJECTION: forcing a failure. [ 2784.576267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2784.577851] CPU: 0 PID: 30283 Comm: syz-executor.4 Not tainted 5.10.232 #1 [ 2784.578774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.579853] Call Trace: [ 2784.580204] dump_stack+0x107/0x167 [ 2784.580676] should_fail.cold+0x5/0xa [ 2784.581191] ? rfkill_sync_work+0xa0/0xa0 [ 2784.581734] _copy_from_user+0x2e/0x1b0 [ 2784.582258] ? rfkill_sync_work+0xa0/0xa0 [ 2784.582823] rfkill_fop_write+0xb4/0x4b0 [ 2784.583357] ? rfkill_sync_work+0xa0/0xa0 [ 2784.583908] ? security_file_permission+0xb1/0xe0 [ 2784.584544] ? rfkill_sync_work+0xa0/0xa0 [ 2784.585091] vfs_write+0x29a/0xb10 [ 2784.585560] ksys_write+0x1f6/0x260 [ 2784.586038] ? __ia32_sys_read+0xb0/0xb0 [ 2784.586578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.587266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.587944] do_syscall_64+0x33/0x40 [ 2784.588433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.589109] RIP: 0033:0x7ff450e18b19 [ 2784.589599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.592017] RSP: 002b:00007ff44e38e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2784.593017] RAX: ffffffffffffffda RBX: 00007ff450f2bf60 RCX: 00007ff450e18b19 [ 2784.593948] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000003 [ 2784.594895] RBP: 00007ff44e38e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.595827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2784.596776] R13: 00007ffecb9d051f R14: 00007ff44e38e300 R15: 0000000000022000 [ 2799.599555] FAULT_INJECTION: forcing a failure. [ 2799.599555] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:16:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x0, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:16:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:16:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x0, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x10000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r5, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8000, 0x4, &(0x7f0000000240)=[{&(0x7f0000000300)="088e53154e887dc5247a358c781fe4cd2e7424c14d1be91d7ecceb5fe8f228e4605e4286dcdf9f57c84835873882521b38f141b0da10e621e216ce909f7dc4f2c6764d72690d736d0a94c5d16a4e82b10d8488f9fedb39ec620d3435cb19359ade9e5cad079cc1637a3a8f81da0394f1e308c4ed44ae336639476692d6d445476fc0fb68ae7793c47945e5a4773271ac1b102a52da925a33ab9c523ee2546e5fe8ba536437c40bd6b7d0a4ed5c6bf51d61c349af5ceafdb277ab8da15fab632a89208e", 0xc3, 0x9}, {&(0x7f0000000480)="1f802b215cc3d44bc83ea8d35afe53c44ee2bf3eab8e5f6d2af725c6dc22244fcd92b5e92ae69a3bcc1c32cfbbef3b9e4ea81f61291f3f843a59a8881640546ee9d7bbfc40fa71385492f055b84f1469d1fff844760aa415b6db8a2edff0a030216b97f45d14a902e0d84b50c28493d833988706e66f84e193f40613a0ccc3d12beebcdb9d0d25e8ee95cd7b6dbc2ea4210065692bb19aa14ca97a817e27638e0fca15bb9c3bda9e0d107885a4caf89339512739a0cb6ff5501a378c4a7d74e5182e948faa68dd603351f2efa9b56a12e49ac2a8d74dc6735d8c3a5b8ecef38b", 0xe0, 0x1}, {&(0x7f0000000180)="68197ee8eb2eb55524fd0452d67eef3d3d8c77eaf1fcc12b16bcc3dc43ce210b8bcd2369a075a51b15d85c020194c69c7f1265f45930", 0x36, 0x9}, {&(0x7f0000000940)="deb7e3f399f01ffa2288779ebddb5bb3bdbc011ff0cbaf8abd73dc34a38040f7f06b6cd6dd0e806fd9ef7912f375d443fdf45939fcb1a14d01d91687e318b7619eca16bfed07ca2efec7462cb9a99312bbc04455c890b5180f881f43681b9e072234639181bd3b795385b35af58adbad9ea59c78fd3d1d4b41913764319a204a365926be6299c5639efdf34eeef8bd3ea0fd991d25e9f017dc6c132e1b71d37a55d8bdb0a62a2a1eae2d934276b8ac598271df2bd39d5f655db34930e34ee94559e4d14e6c5b677348f0dc27c0e6baa508540e9315211ba94fa8f0e4a6d807e6c762f7012ad0251e58350892a99297218b3de106f37b9bfd65eeea01b94f8f73adb0d7c7d2ecf74e8ddbce61117cb3a92fc7713658d1b52bd0d9581b8c194750d11f804bce4cb5ac3c351f6ad6032ca4227a8cfaab9d7e5cefd6cf99931f973007d2402178a485fb4c549e6469a35762f0fe3840b612cea651231714be6f92bef955fc1072fa5f71084b266eec887cc82661b99eeb2a4652b9a8f39c32b1871ca710def10bee92d69b56fa096329de9754da6edd9aecc8a4543e2d15ba85ec1b5349ff79f5703ab29c704546c6a377bae9dab951a4ac3dcaeb71febf3032934967a759cdc0a019cc228c586a3149b714f7f4851df8e6dde59aab7febf2d6a156e0e3f31ba48ea6bf73483c2935ce11a8b23657471c625d709bcc1b21c03e22428a699e1558e66b45b2d000cf9c7cf766c0742334530c48861d8067e90181ea2919652f8ab540bde3e126fe561fdeefc5400e5c0cc2b93db16d684cdb2db247fac52d065a1e143df3010beba7f595202bf6a35152876cfeb62d5b2838c3a4723519d3f1d231d60cf02ec8c2d4ef1923507afa74ecdc21851de5e47fcaee2c7f6d33923796ac6b9a1f4132bae71206f48411004adba3ac3c93b0b1dedd211a8b7d616a9a5ce5641bc66c9a6be7be4d98a8db979fc70aab884a3bbbb3ae6265aa9aee4d6b3b0ee025914f9ecbf34a0be032ef041f560bdeec5a5d59f089045194ee6d1db3e8b7bd4a7ce28ef96de4af1442547a00180594a5832c8776589b084867806fe6fd7247810b9e2f0e91da6c97a4b36a9471b2b74bc8f8fc01e41d85c2514b92c29090bb809076f9a827cfbb27f37d28f945acd1e90c8bd20aa42e27c4b628371087dce8d795e776faf56ec4d4d237a734f9d6ba12a3e1ec0ca5f78509cedcce6b233f7ebb8b92fcbc39b5774da1fc8b0a4aa3e602ddca87e44eee366af56ffa46433892cdc252044e56cd1ad1a1e8bf8de3332ac789f610cb4d06a936fb565122c28028a788e84e164880797d7b7b99ab516eb30b6de983ae2956510c91fdd8a811c2691c919561299f36df2dd1fba8eb57655532df39433afea5d1288742cdf52a459eb587b1586253b3e3e8e8c8dcfb4dd57f629ebb10a3b4f3d1ca678c54f4f6883f4742f372cd3dfc12c232413ac08baaaf126c7c9cee3fc36db6ff4b0c385512cb836d545066322dd599b945d1b0ba766da11a3bf5e59bfe711208d670449dd352905d55c8fb407240cf77ed7f7f2dea3a5873620298bb3391075f3bd6bd8ce041ffc474e2bba822eeebc942ff03bf308704d90cf9e6bdbba0a067072c16bf8a60c9e303c8de042dddfcaa04cc0708fc76433b2a9fdf7b08141597cfee1aabf8711ec994e2b8c1e226d42d9fa8a4a92f7edfd5e31087d9ecf3ae974f6d6bdd287ba33936ab589e4379a2878c72c4843248870175152b18ccb54d6164333f98c3ff757411f32a4c04995639888da899d6813265388f35846e3f604a536338e0b1f146ce3826f762018b79a6ff2b1cfea1118982fea72030a2a6adb17fad75cf6cd041620a4890384ba3a0a5036b634334fe26e1c745da6b84c1c407d7f8b96878c1e984a83563ca4a12b46683d789493279d5bde4cb219749bba850e6d47df1746b45f6a270937227cb35bac9d04770442b0af7c075c6d92ee440375c0590937ab0177bd2b521b579e3931d8f0171c290746d55b50d6d0d2bf29424e21453e4f0d30b2bb224944e40dce64d3f03e8f0660a15ffb5a188af46ecf4b0fb0bcce328eb0a71d1a04a3d513a95ab2259b70ec42a586ec11bfa46d4ad6e1182d2b5fd16000ada05c46bf8339e573521f11773c38b896b84dd4130f63b95ad8baa4f29c27e091ab44ed7b6fdecbbdce3ffb4a793bc5e2f52e74f4eb30e1c767ea83ddf68bda21fe328475610d078a9596b04da259faf7aa54547350a732be272f996a8e1e985d7392a998d4f6daa8ce3d2458fe7da60a4944ce9569b147a40ba77cd128979bbc92fb2081daa0cede98aa76028a186d7c29390b057e0ddca81c70125593bc7995e4827a7f4afc79d85080cbf07011bcb5371b85020278bec6a8ed49e441421d2c21eb14ee04efb6982a461423e1e49466d2d4bdfc7df473b2223fc8fc83165ce8ae2714aaa9e32b537b0fecafc6a2dc4176bb75e06ddf1a29dd73819416e8e0d5b37a01f2824d15872de89dab1735a3c3479e540740d483526243b9d0fe4e1541e4e3d9f2357ca6835552f547ea7a153ed2b3b28c4aaac830a494fdddc2337f695dbaa8593c75595a9e8422d7027efbf18340f40130c5d31dcdc9803c8d99a13c16ecf924bcf60acb36f1b926d2a134fbe676fae07ccb0b7fef01cb2f7802da899cb8caeebe115ba7a6cd6756e2313fbb97050e3abc457be6c97ff77ccf9e2e9e20a24c9fbfb8083cded2b445a5862a960a422932bb673ce747ec27538c8eb9f7489d4829a32dbf26f41181dd0bdeadeb68e4048989bf64b50562153b6a96340e9dec1be0792150204f36a6cd3f43c5d8fffa94b788ede69123c409244ac82a897cc8d6dd7e9710f329e49fba9b6dce3c369a4ad4b1ab8f63a87326dcb857f86ef590d338050f495742a0c2b0319fae10abfd6ece60f4c7b644021127d69b213258e757879fe3f58a664005da1077ca6b7b0d6f15a413667177b9e40447031c9c5dda00773b2649352cdf40bc6536306989faf008886650e375ebf4454eb342e040c3f25abf4878c9afea4c446b3df5dfb801bda62f9fe8b3822a9b6de2cc632dfe1b7a7f37b3c0017d79bda9c6ba95d8e27525ad36e2663f5c683d42643dd3ae38a3db0e2986100b246c4515c12289033c0722b1eafad1cade60e2aa74a79b30e69975ef2a489e0d5f7b64af43d8125d4798e189ee55c97ca0619c4a89b8d9aa5b6a79efa402b64721ffc47935f77d61a4f1dad9463d6dc9e063c8d0fca889e0275b884fc46843a9a9bc9708b14ccedb33a39d513c88c17b870b9d55d69e784c37c0a808a19c5832c620a1e7daa2ec97edcec7c566ba0dc2fdf7d42cc2f14d7dd58cffe152b99a845a0564fb39ead6643aa1d1415bce78bb88d6b03f0a7a88154d53fd35753ef9a6467b33debf53f21593f3403d0587792d5e9db81e77da97439a605aea1b88ea7747b4f19ddcdebdf67ee22cbb451ac18ddb0db64b4377f6acb5eba9d2a331bdad31058f0fe3a939ba15239457c935060f0cff9bbd28abbc15bc06e5d0c33692888845c7d4dba4632245f4c42234962f577d56f8343d7276330f8438a131f682a84f54a731c0a45ee3fc749d2546d0fa0e2349434107fffec5feed2b7e07056451db6230d4bfaa93e2c42bd5020f292d491bcee8019ef55b5cb75f8406828ca910a23dd8dc999c676846dc7820e6982d8bf6df54fca0053c5950b4ac466c77ad27b78da27f8a813d84181061a19cd22d430770d21d532259cc050de9d6509515cb5c5b96e1ceb88b2402bc125e3a4cf53da867930a79e0865b0cfb8ae020fb01ef7d6477d88632361240f9760efd81fa52213bb938a0f97b0bc07f6957d18e5fee6d1bca1b7173d170a7b5e42248f4253389255acdc326997a8e178e439041fea5e95943f6eb1e8b641769ad0570bbfa24b313a3aa914ec2514db0640be5f497acd13af0beeec34b58b835316f83a835ef008c971b6fa4428797c772c6bb66ec2e6a686f146380f33acd21af0678e8c032b2ce0ca57c4aeb8a8c3a1b0f5a9d267cc4706e3be9a15292f5a8d9726c5c0949723e7852957346b2d2b0bc1c33acdf5f7bcb589af42d66d15b2b9df283ca318d9b806eaf28046164df90602619e08bc70f9e89936a220d8d7f926f166f1200acd6f9a16d704704c2f4bab4c3ea927fbb6e5a4f7dad56787429c4c0f19a3ece0fd751914ad9d3b01b9f40eac8c8980654679636f323875da5bd91b0b5265a49d8c51d4ad495f9892ec494eb6951429a6baebd041a21c54c3d7dde4483db197f5d43a177bbd1825215c47253c88e6b2341e9b4b170895f4531436a7ba926b78262ba97763426e57001445207d4a1414566e49f9c8ab4a96e67ab2c1f4c0bb165e91e062587b02fa6bf31a2f2624d0b6148788aa2e849ef7d218f505c4fa579f4a3d3bca4abbe5fd462272e4a1b78eef448ae296048f6e45733377fd602fd2dab0298bf0c508ae2e365ce76a994f7e81c1cefdc552e49bbf73590b4a27f5f37299795f7a01888b58eb4dcf3a8e1a30832b2daafd63b09e7bf4b9f6cdbab5c181e769ab356ff72d9bfc938c61b2d693766758d79c11bcc1767d82c00e287aae5eb0dd549a38a257d4362b39778015a3c1596245c0f099d112d9bdae6e325a6567042c341b78dfab810492908be758edcf8fcc1cb89fdfe17a4931f4a81514a88bd547d92ed5279f45b05a0bcc24d378695ff8e84a2e7a8085617c7288450c8c684de9c3f6d6fa14e13ec7f397faf9dfa675f4251fd00963b93ce28deb8732e3730146c1c2534371c30bad1f36c42444d26d5ded47b937f09b89c97589dddb3aecdf4d54544dffd497bef0aba469169d94c157b07c37fe18e1db0876d8d127dc81adeeafc71d1692546736fabc3fd0c85b3fe18042399c9eb58846db676054dac51b4e152f26bbe40aa81fc4b890f483b678a31e35e4b2ce9ab0af4c6b89ee7aac4f205fc18e9203d7c47789c270c6826aceaac5edd0dbc230ab2f512bdd7236ae8fc9fd5c98f5091d412468faaddb82601eead02bf64e4632c4a1de9fa58b44cdcc04e530653d1be2343d3fa0349f950ed24faa49610d9c79a18a76171e8a7716f6b1cc96938e131271aaca291e5935322338b90598f24fd7b81bac3bd4ab91d57baf0ba1dde92e85168407ca746de517919c91d9cae937c4d84254d9c92f9d6bfe16d45089278ef0afceeaf3d3f2f0905b29461c009895ba1171b1a064242cfc26a1b908f839f884d5f5389dfda2def1093598dd4cbb0e646c5d3cbfb6977012987aabcafd1f9ae4d7fa2a7c1eef431f4ffee51abf9500583d1f1d24e863ce33e00494e33d93e105f7981ae5bb08703c7b4ce5b1a62a527730d0c1b0b763391ce42d25c7765c33ae7e7b6ae0460ef661db39c6610c3670fed738f223b06e5c69c9ca1f3f2324e943c5500391763901ac26a4a0f7ed26b49965f44c681ae2fd46ec26e9e3ebb9e2d3a5db02f72cc24cd1793c72bd3065a0edcf2019fd8483c13a5e575432e44474536a49a79393c17b20a29767ab81be6378b60a2c1dde1df9bb5f6bcb67006a2fe81fe30e79ad4199fc63e76003cb09acf06d22572fff605a3d791f1f1c171579d4810408ac9944cba1f04bc18a125cf3346663e1bfcfe015df37cbf8ec20be7f19128b9300e3fa6add6f85c16502edba23ad4d84085859dc236ca4523319932cbf48e9c4863b85f78f8a9081cbe15675bc0d6d71ec0d98891d2a2a1403c8397ebaad2b8c01817fbe78fd64705e631411bbf459e3ca3421d411aff1", 0x1000, 0x8}], 0x210004, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1}}, {@huge_never}, {@size={'size', 0x3d, [0x37, 0x78, 0x36, 0x0, 0x32]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x5e, 0x6d, 0x78]}}], [{@measure}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/\x97*%]+\xe4+](}@{.{{!/]\\Q'}}, {@appraise_type}]}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0xa0bd307c3d31e9d2, 0x4004, @fd=r5, 0xefa, 0x10000, 0x3f, 0x3, 0x1, {0x3, r7}}, 0x81) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) [ 2799.602793] CPU: 1 PID: 30296 Comm: syz-executor.4 Not tainted 5.10.232 #1 recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:16:14 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) (fail_nth: 2) 02:16:14 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180), 0x8) [ 2799.604800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.607028] Call Trace: [ 2799.607654] dump_stack+0x107/0x167 [ 2799.608506] should_fail.cold+0x5/0xa [ 2799.609402] _copy_to_user+0x2e/0x180 [ 2799.610298] simple_read_from_buffer+0xcc/0x160 [ 2799.611391] proc_fail_nth_read+0x198/0x230 [ 2799.612402] ? proc_sessionid_read+0x230/0x230 [ 2799.613463] ? security_file_permission+0xb1/0xe0 [ 2799.614608] ? proc_sessionid_read+0x230/0x230 [ 2799.615686] vfs_read+0x228/0x620 [ 2799.616508] ksys_read+0x12d/0x260 [ 2799.617338] ? vfs_write+0xb10/0xb10 [ 2799.618215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.619450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.620648] do_syscall_64+0x33/0x40 [ 2799.621517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.622707] RIP: 0033:0x7ff450dcb69c [ 2799.623586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2799.627869] RSP: 002b:00007ff44e38e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2799.629637] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff450dcb69c [ 2799.631303] RDX: 000000000000000f RSI: 00007ff44e38e1e0 RDI: 0000000000000004 [ 2799.632964] RBP: 00007ff44e38e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2799.634623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2799.636289] R13: 00007ffecb9d051f R14: 00007ff44e38e300 R15: 0000000000022000 02:16:14 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180), 0x8) 02:16:14 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180), 0x8) 02:16:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)="47867ee09308f2ef9580d3486ae79129dc25abff5695", 0x16}], 0x1) 02:16:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:14 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) (fail_nth: 1) 02:16:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) fork() [ 2799.822045] FAULT_INJECTION: forcing a failure. [ 2799.822045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2799.824850] CPU: 1 PID: 30320 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 2799.826489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.828435] Call Trace: [ 2799.829070] dump_stack+0x107/0x167 [ 2799.829935] should_fail.cold+0x5/0xa [ 2799.830843] ? rfkill_sync_work+0xa0/0xa0 [ 2799.831836] _copy_from_user+0x2e/0x1b0 [ 2799.832777] ? rfkill_sync_work+0xa0/0xa0 [ 2799.833755] rfkill_fop_write+0xb4/0x4b0 [ 2799.834717] ? rfkill_sync_work+0xa0/0xa0 [ 2799.835716] ? security_file_permission+0xb1/0xe0 [ 2799.836864] ? rfkill_sync_work+0xa0/0xa0 [ 2799.837841] vfs_write+0x29a/0xb10 [ 2799.838688] ksys_write+0x1f6/0x260 [ 2799.839566] ? __ia32_sys_read+0xb0/0xb0 [ 2799.840539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.841777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.842964] FAULT_INJECTION: forcing a failure. [ 2799.842964] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.845539] do_syscall_64+0x33/0x40 [ 2799.846406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.847608] RIP: 0033:0x7fd41c454b19 [ 2799.848479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.852764] RSP: 002b:00007fd4199ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2799.854534] RAX: ffffffffffffffda RBX: 00007fd41c567f60 RCX: 00007fd41c454b19 [ 2799.856202] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000003 [ 2799.857857] RBP: 00007fd4199ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2799.859535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2799.861187] R13: 00007ffc3b3b47ff R14: 00007fd4199ca300 R15: 0000000000022000 [ 2799.862869] CPU: 0 PID: 30322 Comm: syz-executor.0 Not tainted 5.10.232 #1 [ 2799.863796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.864821] Call Trace: [ 2799.865156] dump_stack+0x107/0x167 [ 2799.865617] should_fail.cold+0x5/0xa [ 2799.866101] should_failslab+0x5/0x20 [ 2799.866592] kmem_cache_alloc_bulk+0x4b/0x320 [ 2799.867181] io_submit_sqes+0x6fe6/0x8610 [ 2799.867745] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2799.868389] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2799.869000] ? find_held_lock+0x2c/0x110 [ 2799.869516] ? io_submit_sqes+0x8610/0x8610 [ 2799.870084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2799.870715] ? wait_for_completion_io+0x270/0x270 [ 2799.871349] ? rcu_read_lock_any_held+0x75/0xa0 [ 2799.871950] ? vfs_write+0x354/0xb10 [ 2799.872430] ? fput_many+0x2f/0x1a0 [ 2799.872897] ? ksys_write+0x1a9/0x260 [ 2799.873383] ? __ia32_sys_read+0xb0/0xb0 [ 2799.873909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.874585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.875258] do_syscall_64+0x33/0x40 [ 2799.875741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.876402] RIP: 0033:0x7f34960f4b19 [ 2799.876882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.879247] RSP: 002b:00007f349366a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2799.880238] RAX: ffffffffffffffda RBX: 00007f3496207f60 RCX: 00007f34960f4b19 [ 2799.881164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2799.882083] RBP: 00007f349366a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2799.882999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2799.883902] R13: 00007ffe37355ecf R14: 00007f349366a300 R15: 0000000000022000 02:16:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x0, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:16:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:32 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001ffed0018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r4 = socket$unix(0x1, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x6f10, &(0x7f0000000980), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) kcmp(r2, 0x0, 0x0, r3, r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=virtio,cache=none,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f5e65766d61702c64666c746769641f", @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',msize=0x0000000000000101,access=user,debug=0x0000000000000003,access=any,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=unconfined_u,\x00']) 02:16:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) 02:16:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 02:16:32 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) (fail_nth: 2) 02:16:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) fork() [ 2817.382477] FAULT_INJECTION: forcing a failure. [ 2817.382477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2817.384641] CPU: 0 PID: 30348 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 2817.385878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.387350] Call Trace: [ 2817.387838] dump_stack+0x107/0x167 [ 2817.388497] should_fail.cold+0x5/0xa [ 2817.389193] _copy_to_user+0x2e/0x180 [ 2817.389891] simple_read_from_buffer+0xcc/0x160 [ 2817.390736] proc_fail_nth_read+0x198/0x230 [ 2817.391514] ? proc_sessionid_read+0x230/0x230 [ 2817.392340] ? security_file_permission+0xb1/0xe0 [ 2817.393203] ? proc_sessionid_read+0x230/0x230 [ 2817.394015] vfs_read+0x228/0x620 [ 2817.394646] ksys_read+0x12d/0x260 [ 2817.395280] ? vfs_write+0xb10/0xb10 [ 2817.395958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2817.396891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2817.397808] do_syscall_64+0x33/0x40 [ 2817.398466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.399390] RIP: 0033:0x7fd41c40769c [ 2817.400057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2817.403339] RSP: 002b:00007fd4199ca170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2817.404687] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fd41c40769c [ 2817.405947] RDX: 000000000000000f RSI: 00007fd4199ca1e0 RDI: 0000000000000004 [ 2817.407209] RBP: 00007fd4199ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.408473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2817.409734] R13: 00007ffc3b3b47ff R14: 00007fd4199ca300 R15: 0000000000022000 [ 2817.425184] audit: type=1400 audit(1735611392.271:66): avc: denied { associate } for pid=30335 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 2817.437189] FAULT_INJECTION: forcing a failure. [ 2817.437189] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.440560] CPU: 1 PID: 30345 Comm: syz-executor.0 Not tainted 5.10.232 #1 [ 2817.442508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.444421] Call Trace: [ 2817.445159] dump_stack+0x107/0x167 [ 2817.446175] should_fail.cold+0x5/0xa [ 2817.447252] ? create_object.isra.0+0x3a/0xa20 [ 2817.448538] should_failslab+0x5/0x20 [ 2817.449604] kmem_cache_alloc+0x5b/0x310 [ 2817.450759] create_object.isra.0+0x3a/0xa20 [ 2817.451991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2817.453197] kmem_cache_alloc_bulk+0x168/0x320 [ 2817.454475] io_submit_sqes+0x6fe6/0x8610 [ 2817.455468] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2817.456844] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2817.458179] ? find_held_lock+0x2c/0x110 [ 2817.459104] ? io_submit_sqes+0x8610/0x8610 02:16:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) [ 2817.460322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2817.461677] ? wait_for_completion_io+0x270/0x270 [ 2817.462789] ? rcu_read_lock_any_held+0x75/0xa0 [ 2817.463846] ? vfs_write+0x354/0xb10 [ 2817.464684] ? fput_many+0x2f/0x1a0 [ 2817.465500] ? ksys_write+0x1a9/0x260 [ 2817.466337] ? __ia32_sys_read+0xb0/0xb0 [ 2817.467284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2817.468515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2817.469698] do_syscall_64+0x33/0x40 [ 2817.470532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.471687] RIP: 0033:0x7f34960f4b19 [ 2817.472523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.476649] RSP: 002b:00007f349366a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2817.478340] RAX: ffffffffffffffda RBX: 00007f3496207f60 RCX: 00007f34960f4b19 [ 2817.479911] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2817.481469] RBP: 00007f349366a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.483028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2817.484593] R13: 00007ffe37355ecf R14: 00007f349366a300 R15: 0000000000022000 02:16:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:16:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:16:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x2, 0x0, 0x3}, 0x8) 02:16:32 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 02:16:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:48 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 02:16:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x0, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:16:48 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)}], 0x1) 02:16:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4c, 0x3}, 0xc004, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) unshare(0x48020200) 02:16:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x8, 0x0, 0x3}, 0x8) 02:16:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) fork() 02:16:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2833.250901] FAULT_INJECTION: forcing a failure. [ 2833.250901] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.253807] CPU: 0 PID: 30485 Comm: syz-executor.0 Not tainted 5.10.232 #1 [ 2833.255383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.257287] Call Trace: [ 2833.257892] dump_stack+0x107/0x167 [ 2833.258721] should_fail.cold+0x5/0xa [ 2833.259592] ? create_object.isra.0+0x3a/0xa20 [ 2833.260829] should_failslab+0x5/0x20 [ 2833.261751] kmem_cache_alloc+0x5b/0x310 [ 2833.262704] ? mark_held_locks+0x9e/0xe0 [ 2833.263660] create_object.isra.0+0x3a/0xa20 [ 2833.264695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2833.265893] kmem_cache_alloc_bulk+0x168/0x320 [ 2833.266971] io_submit_sqes+0x6fe6/0x8610 [ 2833.267973] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2833.269180] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2833.270371] ? find_held_lock+0x2c/0x110 [ 2833.271331] ? io_submit_sqes+0x8610/0x8610 [ 2833.272362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2833.273488] ? wait_for_completion_io+0x270/0x270 [ 2833.274609] ? rcu_read_lock_any_held+0x75/0xa0 [ 2833.275683] ? vfs_write+0x354/0xb10 [ 2833.276554] ? fput_many+0x2f/0x1a0 [ 2833.277398] ? ksys_write+0x1a9/0x260 [ 2833.278280] ? __ia32_sys_read+0xb0/0xb0 [ 2833.279224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.280467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.281665] do_syscall_64+0x33/0x40 [ 2833.282526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.283714] RIP: 0033:0x7f34960f4b19 [ 2833.284645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.288938] RSP: 002b:00007f349366a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2833.290704] RAX: ffffffffffffffda RBX: 00007f3496207f60 RCX: 00007f34960f4b19 [ 2833.292363] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2833.294015] RBP: 00007f349366a1d0 R08: 0000000000000000 R09: 0000000000000000 02:16:48 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x2, 0x0, 0x3}, 0x8) 02:16:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1000000, 0x0, 0x3}, 0x8) 02:16:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2833.295747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.297361] R13: 00007ffe37355ecf R14: 00007f349366a300 R15: 0000000000022000 02:16:48 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) (fail_nth: 1) [ 2833.348297] FAULT_INJECTION: forcing a failure. [ 2833.348297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.351069] CPU: 0 PID: 30492 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 2833.352648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.354527] Call Trace: [ 2833.355128] dump_stack+0x107/0x167 [ 2833.355958] should_fail.cold+0x5/0xa [ 2833.356839] _copy_from_user+0x2e/0x1b0 [ 2833.357747] iovec_from_user+0x141/0x400 [ 2833.358672] __import_iovec+0x67/0x590 [ 2833.359555] ? perf_trace_lock+0xac/0x490 [ 2833.360512] import_iovec+0x83/0xb0 [ 2833.361345] vfs_writev+0xc1/0x620 [ 2833.362158] ? vfs_iter_write+0xa0/0xa0 [ 2833.363068] ? __fget_files+0x2cf/0x520 [ 2833.363976] ? lock_downgrade+0x6d0/0x6d0 [ 2833.364925] ? find_held_lock+0x2c/0x110 [ 2833.365858] ? ksys_write+0x12d/0x260 [ 2833.366733] ? __fget_files+0x2f8/0x520 [ 2833.367646] ? __fget_light+0xea/0x290 [ 2833.368549] do_writev+0x139/0x300 [ 2833.369362] ? vfs_writev+0x620/0x620 [ 2833.370233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.371428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.372616] do_syscall_64+0x33/0x40 [ 2833.373463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.374633] RIP: 0033:0x7fb5de172b19 [ 2833.375480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.379766] RSP: 002b:00007fb5db6e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2833.381509] RAX: ffffffffffffffda RBX: 00007fb5de285f60 RCX: 00007fb5de172b19 [ 2833.383129] RDX: 0000000000000001 RSI: 0000000020000900 RDI: 0000000000000003 [ 2833.384749] RBP: 00007fb5db6e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.386400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.388017] R13: 00007ffc935b6dbf R14: 00007fb5db6e8300 R15: 0000000000022000 02:16:48 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x8, 0x0, 0x3}, 0x8) 02:16:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x2000000, 0x0, 0x3}, 0x8) 02:16:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:16:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:16:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x8000000, 0x0, 0x3}, 0x8) 02:17:04 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) (fail_nth: 2) [ 2849.957139] FAULT_INJECTION: forcing a failure. [ 2849.957139] name failslab, interval 1, probability 0, space 0, times 0 [ 2849.958573] CPU: 0 PID: 30528 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 2849.959419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2849.960441] Call Trace: [ 2849.960779] dump_stack+0x107/0x167 [ 2849.961234] should_fail.cold+0x5/0xa [ 2849.961712] should_failslab+0x5/0x20 [ 2849.962187] __kmalloc_track_caller+0x79/0x370 [ 2849.962754] ? nvram_misc_write+0x92/0xf0 [ 2849.963272] memdup_user+0x22/0xd0 [ 2849.963711] nvram_misc_write+0x92/0xf0 [ 2849.964208] do_iter_write+0x4f0/0x700 [ 2849.964700] ? import_iovec+0x83/0xb0 [ 2849.965178] vfs_writev+0x1ae/0x620 [ 2849.965631] ? vfs_iter_write+0xa0/0xa0 [ 2849.966127] ? __fget_files+0x2cf/0x520 [ 2849.966635] ? lock_downgrade+0x6d0/0x6d0 [ 2849.967149] ? find_held_lock+0x2c/0x110 [ 2849.967656] ? ksys_write+0x12d/0x260 [ 2849.968128] ? __fget_files+0x2f8/0x520 [ 2849.968621] ? __fget_light+0xea/0x290 [ 2849.969108] do_writev+0x139/0x300 [ 2849.969547] ? vfs_writev+0x620/0x620 [ 2849.970015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2849.970673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2849.971310] do_syscall_64+0x33/0x40 [ 2849.971767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2849.972396] RIP: 0033:0x7fb5de172b19 [ 2849.972856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2849.975124] RSP: 002b:00007fb5db6e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2849.976062] RAX: ffffffffffffffda RBX: 00007fb5de285f60 RCX: 00007fb5de172b19 [ 2849.976948] RDX: 0000000000000001 RSI: 0000000020000900 RDI: 0000000000000003 [ 2849.977827] RBP: 00007fb5db6e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.978715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2849.979600] R13: 00007ffc935b6dbf R14: 00007fb5db6e8300 R15: 0000000000022000 02:17:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x3f00, 0x0, 0x3}, 0x8) 02:17:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x0, 0x0, 0x100000000, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:17:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:17:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:04 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x8, 0x0, 0x3}, 0x8) 02:17:04 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 02:17:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) fork() 02:17:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1000000, 0x0, 0x3}, 0x8) [ 2850.069933] FAULT_INJECTION: forcing a failure. [ 2850.069933] name failslab, interval 1, probability 0, space 0, times 0 [ 2850.072891] CPU: 1 PID: 30536 Comm: syz-executor.0 Not tainted 5.10.232 #1 [ 2850.074537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2850.076528] Call Trace: [ 2850.077186] dump_stack+0x107/0x167 [ 2850.078065] should_fail.cold+0x5/0xa [ 2850.078988] ? create_object.isra.0+0x3a/0xa20 [ 2850.080093] should_failslab+0x5/0x20 [ 2850.081007] kmem_cache_alloc+0x5b/0x310 [ 2850.081967] ? mark_held_locks+0x9e/0xe0 [ 2850.082930] create_object.isra.0+0x3a/0xa20 [ 2850.083964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2850.085178] kmem_cache_alloc_bulk+0x168/0x320 [ 2850.086266] io_submit_sqes+0x6fe6/0x8610 02:17:04 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x1000000, 0x0, 0x3}, 0x8) 02:17:04 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) (fail_nth: 3) 02:17:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x2000000, 0x0, 0x3}, 0x8) [ 2850.087309] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2850.088644] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2850.089802] ? find_held_lock+0x2c/0x110 [ 2850.090974] ? io_submit_sqes+0x8610/0x8610 [ 2850.092245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2850.093667] ? wait_for_completion_io+0x270/0x270 [ 2850.095053] ? rcu_read_lock_any_held+0x75/0xa0 [ 2850.096382] ? vfs_write+0x354/0xb10 [ 2850.097471] ? fput_many+0x2f/0x1a0 [ 2850.098523] ? ksys_write+0x1a9/0x260 [ 2850.099614] ? __ia32_sys_read+0xb0/0xb0 [ 2850.100802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2850.102111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2850.103216] do_syscall_64+0x33/0x40 [ 2850.104014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2850.105157] RIP: 0033:0x7f34960f4b19 [ 2850.105957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2850.109055] FAULT_INJECTION: forcing a failure. [ 2850.109055] name failslab, interval 1, probability 0, space 0, times 0 [ 2850.109882] RSP: 002b:00007f349366a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2850.109904] RAX: ffffffffffffffda RBX: 00007f3496207f60 RCX: 00007f34960f4b19 [ 2850.109921] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2850.115906] RBP: 00007f349366a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2850.117441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2850.118955] R13: 00007ffe37355ecf R14: 00007f349366a300 R15: 0000000000022000 [ 2850.120528] CPU: 0 PID: 30545 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 2850.121399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2850.122417] Call Trace: [ 2850.122749] dump_stack+0x107/0x167 [ 2850.123197] should_fail.cold+0x5/0xa [ 2850.123669] ? create_object.isra.0+0x3a/0xa20 [ 2850.124232] should_failslab+0x5/0x20 [ 2850.124709] kmem_cache_alloc+0x5b/0x310 [ 2850.125228] create_object.isra.0+0x3a/0xa20 [ 2850.125769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2850.126395] __kmalloc_track_caller+0x177/0x370 [ 2850.126967] ? nvram_misc_write+0x92/0xf0 [ 2850.127477] memdup_user+0x22/0xd0 [ 2850.127921] nvram_misc_write+0x92/0xf0 [ 2850.128411] do_iter_write+0x4f0/0x700 [ 2850.128906] ? import_iovec+0x83/0xb0 [ 2850.129378] vfs_writev+0x1ae/0x620 [ 2850.129826] ? vfs_iter_write+0xa0/0xa0 [ 2850.130316] ? __fget_files+0x2cf/0x520 [ 2850.130814] ? lock_downgrade+0x6d0/0x6d0 [ 2850.131322] ? find_held_lock+0x2c/0x110 [ 2850.131829] ? ksys_write+0x12d/0x260 [ 2850.132306] ? __fget_files+0x2f8/0x520 [ 2850.132801] ? __fget_light+0xea/0x290 [ 2850.133309] do_writev+0x139/0x300 [ 2850.133758] ? vfs_writev+0x620/0x620 [ 2850.134249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2850.134910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2850.135551] do_syscall_64+0x33/0x40 [ 2850.136017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2850.136658] RIP: 0033:0x7fb5de172b19 [ 2850.137128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2850.139421] RSP: 002b:00007fb5db6e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2850.140368] RAX: ffffffffffffffda RBX: 00007fb5de285f60 RCX: 00007fb5de172b19 [ 2850.141261] RDX: 0000000000000001 RSI: 0000000020000900 RDI: 0000000000000003 [ 2850.142139] RBP: 00007fb5db6e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2850.143014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2850.143901] R13: 00007ffc935b6dbf R14: 00007fb5db6e8300 R15: 0000000000022000 02:17:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:17:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:05 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 02:17:05 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) dup3(r1, r2, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6f"], 0x98a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) flock(0xffffffffffffffff, 0x4) write(0xffffffffffffffff, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c2419", 0x22) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) lseek(r3, 0x2, 0x4) r5 = dup2(0xffffffffffffffff, r4) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x20}, 0x100, './file0\x00'}) unshare(0x48020200) 02:17:05 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x8000000, 0x0, 0x3}, 0x8) 02:17:05 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x8, 0x3}, 0x8) 02:17:20 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x3f000000, 0x0, 0x3}, 0x8) 02:17:20 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 02:17:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x0, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 02:17:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) (fail_nth: 4) 02:17:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:17:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) fork() 02:17:20 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x8) [ 2865.558920] FAULT_INJECTION: forcing a failure. [ 2865.558920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2865.560714] CPU: 1 PID: 30583 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 2865.561753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2865.562978] Call Trace: [ 2865.563372] dump_stack+0x107/0x167 [ 2865.563914] should_fail.cold+0x5/0xa [ 2865.564484] _copy_from_user+0x2e/0x1b0 [ 2865.565077] memdup_user+0x65/0xd0 [ 2865.565622] nvram_misc_write+0x92/0xf0 [ 2865.566221] do_iter_write+0x4f0/0x700 [ 2865.566802] ? import_iovec+0x83/0xb0 [ 2865.567372] vfs_writev+0x1ae/0x620 [ 2865.567914] ? vfs_iter_write+0xa0/0xa0 [ 2865.568501] ? __fget_files+0x2cf/0x520 [ 2865.569093] ? lock_downgrade+0x6d0/0x6d0 [ 2865.569715] ? find_held_lock+0x2c/0x110 [ 2865.570326] ? ksys_write+0x12d/0x260 [ 2865.570897] ? __fget_files+0x2f8/0x520 [ 2865.571491] ? __fget_light+0xea/0x290 [ 2865.572073] do_writev+0x139/0x300 [ 2865.572606] ? vfs_writev+0x620/0x620 [ 2865.573178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2865.573966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2865.574731] do_syscall_64+0x33/0x40 [ 2865.575283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2865.576048] RIP: 0033:0x7fb5de172b19 [ 2865.576603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2865.579341] RSP: 002b:00007fb5db6e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2865.580477] RAX: ffffffffffffffda RBX: 00007fb5de285f60 RCX: 00007fb5de172b19 [ 2865.581536] RDX: 0000000000000001 RSI: 0000000020000900 RDI: 0000000000000003 [ 2865.582596] RBP: 00007fb5db6e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.583655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.584713] R13: 00007ffc935b6dbf R14: 00007fb5db6e8300 R15: 0000000000022000 [ 2865.608407] FAULT_INJECTION: forcing a failure. [ 2865.608407] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.610322] CPU: 1 PID: 30581 Comm: syz-executor.0 Not tainted 5.10.232 #1 [ 2865.611321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2865.612494] Call Trace: [ 2865.612875] dump_stack+0x107/0x167 [ 2865.613405] should_fail.cold+0x5/0xa [ 2865.613961] ? create_object.isra.0+0x3a/0xa20 [ 2865.614607] should_failslab+0x5/0x20 [ 2865.615142] kmem_cache_alloc+0x5b/0x310 [ 2865.615722] ? mark_held_locks+0x9e/0xe0 [ 2865.616308] create_object.isra.0+0x3a/0xa20 [ 2865.616929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2865.617657] kmem_cache_alloc_bulk+0x168/0x320 [ 2865.618311] io_submit_sqes+0x6fe6/0x8610 [ 2865.618919] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2865.619627] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2865.620321] ? find_held_lock+0x2c/0x110 [ 2865.620901] ? io_submit_sqes+0x8610/0x8610 [ 2865.621525] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2865.622206] ? wait_for_completion_io+0x270/0x270 [ 2865.622890] ? rcu_read_lock_any_held+0x75/0xa0 [ 2865.623568] ? vfs_write+0x354/0xb10 [ 2865.624099] ? fput_many+0x2f/0x1a0 [ 2865.624612] ? ksys_write+0x1a9/0x260 [ 2865.625155] ? __ia32_sys_read+0xb0/0xb0 [ 2865.625747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2865.626487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2865.627226] do_syscall_64+0x33/0x40 [ 2865.627750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2865.628489] RIP: 0033:0x7f34960f4b19 [ 2865.629021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2865.631641] RSP: 002b:00007f349366a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2865.632710] RAX: ffffffffffffffda RBX: 00007f3496207f60 RCX: 00007f34960f4b19 [ 2865.633728] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2865.634730] RBP: 00007f349366a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.635740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.636745] R13: 00007ffe37355ecf R14: 00007f349366a300 R15: 0000000000022000 02:17:20 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0xffffff7f, 0x0, 0x3}, 0x8) 02:17:20 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 02:17:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:20 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x9}, 0x8) 02:17:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) (fail_nth: 5) 02:17:20 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 02:17:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:20 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) [ 2865.847850] FAULT_INJECTION: forcing a failure. [ 2865.847850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2865.850525] CPU: 0 PID: 30701 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 2865.852092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2865.853971] Call Trace: [ 2865.854570] dump_stack+0x107/0x167 [ 2865.855402] should_fail.cold+0x5/0xa [ 2865.856277] _copy_to_user+0x2e/0x180 [ 2865.857148] simple_read_from_buffer+0xcc/0x160 [ 2865.858218] proc_fail_nth_read+0x198/0x230 [ 2865.859198] ? proc_sessionid_read+0x230/0x230 [ 2865.860236] ? security_file_permission+0xb1/0xe0 [ 2865.861329] ? proc_sessionid_read+0x230/0x230 [ 2865.862365] vfs_read+0x228/0x620 [ 2865.863154] ksys_read+0x12d/0x260 [ 2865.863957] ? vfs_write+0xb10/0xb10 [ 2865.864799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2865.865989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2865.867154] do_syscall_64+0x33/0x40 [ 2865.867993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2865.869159] RIP: 0033:0x7fb5de12569c [ 2865.870003] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2865.874157] RSP: 002b:00007fb5db6e8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2865.875873] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb5de12569c [ 2865.877492] RDX: 000000000000000f RSI: 00007fb5db6e81e0 RDI: 0000000000000004 [ 2865.879102] RBP: 00007fb5db6e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.880709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.882322] R13: 00007ffc935b6dbf R14: 00007fb5db6e8300 R15: 0000000000022000 02:17:34 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 02:17:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:17:34 executing program 2: write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 02:17:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000005080)=""/102400, 0x19000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000500)=""/157, 0x9d}], 0x100000000000022b, &(0x7f0000000980)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) r4 = creat(&(0x7f0000000940)='./file0\x00', 0xe) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x5, 0x47, 0x40, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x534, 0x0, @perf_config_ext={0x1d21, 0x8d43}, 0x2740, 0x2, 0x8, 0x5, 0x5dc, 0x7, 0x800, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fork() 02:17:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/43, 0x2b}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40000120, &(0x7f0000000780)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) fork() 02:17:34 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x2}, 0x8) 02:17:34 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000380)='G', 0x1}], 0x1) 02:17:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6955, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1051c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x4, 0xac6e, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000001c}, 0x98c, 0x1f, 0x8, 0x0, 0x0, 0xfffeffff, 0x1ff, 0x0, 0x200, 0x0, 0xff}, r4, 0x1, r3, 0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) [ 2880.194199] [ 2880.194504] ====================================================== [ 2880.195431] WARNING: possible circular locking dependency detected [ 2880.196324] 5.10.232 #1 Not tainted [ 2880.196849] ------------------------------------------------------ [ 2880.197770] syz-executor.4/30723 is trying to acquire lock: [ 2880.198607] ffff88800f674ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2880.200042] [ 2880.200042] but task is already holding lock: [ 2880.200902] ffff88800f674f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2880.202175] [ 2880.202175] which lock already depends on the new lock. [ 2880.202175] [ 2880.203366] [ 2880.203366] the existing dependency chain (in reverse order) is: [ 2880.204465] [ 2880.204465] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 2880.205395] __mutex_lock+0x13d/0x10b0 [ 2880.206041] FAULT_INJECTION: forcing a failure. [ 2880.206041] name failslab, interval 1, probability 0, space 0, times 0 [ 2880.207641] hci_dev_do_close+0xef/0x1240 [ 2880.207652] hci_rfkill_set_block+0x166/0x1a0 [ 2880.207664] rfkill_set_block+0x1fd/0x540 [ 2880.207691] rfkill_fop_write+0x253/0x4b0 [ 2880.208962] CPU: 0 PID: 30727 Comm: syz-executor.0 Not tainted 5.10.232 #1 [ 2880.209532] vfs_write+0x29a/0xb10 [ 2880.209550] ksys_write+0x1f6/0x260 [ 2880.211853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2880.212889] do_syscall_64+0x33/0x40 [ 2880.212909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2880.216804] Call Trace: [ 2880.217624] [ 2880.217624] -> #2 ( [ 2880.219681] dump_stack+0x107/0x167 [ 2880.221271] rfkill_global_mutex){+.+.}-{3:3} [ 2880.223004] should_fail.cold+0x5/0xa [ 2880.223764] : [ 2880.223785] __mutex_lock+0x13d/0x10b0 [ 2880.224364] ? create_object.isra.0+0x3a/0xa20 [ 2880.224863] rfkill_register+0x36/0xa10 [ 2880.224882] hci_register_dev+0x42e/0xc00 [ 2880.225690] should_failslab+0x5/0x20 [ 2880.226315] __vhci_create_device+0x2c8/0x5c0 [ 2880.227166] kmem_cache_alloc+0x5b/0x310 [ 2880.227390] vhci_open_timeout+0x38/0x50 [ 2880.227408] process_one_work+0x9a9/0x14b0 [ 2880.228395] create_object.isra.0+0x3a/0xa20 [ 2880.229027] worker_thread+0x61d/0x1310 [ 2880.229045] kthread+0x38f/0x470 [ 2880.230056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2880.230710] ret_from_fork+0x22/0x30 [ 2880.230720] [ 2880.230720] -> #1 [ 2880.231579] kmem_cache_alloc_bulk+0x168/0x320 [ 2880.232282] ( [ 2880.233199] io_submit_sqes+0x6fe6/0x8610 [ 2880.233828] &data->open_mutex){+.+.}-{3:3} [ 2880.234929] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2880.235532] : [ 2880.235550] __mutex_lock+0x13d/0x10b0 [ 2880.236551] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2880.237094] vhci_send_frame+0x63/0xa0 [ 2880.237111] hci_send_frame+0x1b9/0x320 [ 2880.238265] ? io_submit_sqes+0x8610/0x8610 [ 2880.238835] hci_tx_work+0xfb4/0x15d0 [ 2880.238853] process_one_work+0x9a9/0x14b0 [ 2880.239657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2880.240298] worker_thread+0x61d/0x1310 [ 2880.240316] kthread+0x38f/0x470 [ 2880.240729] ? wait_for_completion_io+0x270/0x270 [ 2880.241313] ret_from_fork+0x22/0x30 [ 2880.241324] [ 2880.241324] -> #0 [ 2880.242291] ? vfs_write+0x354/0xb10 [ 2880.242995] ((work_completion)(&hdev->tx_work) [ 2880.243403] ? fput_many+0x2f/0x1a0 [ 2880.244008] ){+.+.}-{0:0}: [ 2880.245111] ? ksys_write+0x1a9/0x260 [ 2880.245735] __lock_acquire+0x29e7/0x5b00 [ 2880.245754] lock_acquire+0x197/0x470 [ 2880.246761] ? __ia32_sys_read+0xb0/0xb0 [ 2880.247368] __flush_work+0x105/0xa90 [ 2880.247385] hci_dev_do_close+0x131/0x1240 [ 2880.248356] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2880.249024] hci_rfkill_set_block+0x166/0x1a0 [ 2880.249042] rfkill_set_block+0x1fd/0x540 [ 2880.250128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2880.250768] rfkill_fop_write+0x253/0x4b0 [ 2880.250788] vfs_write+0x29a/0xb10 [ 2880.251651] do_syscall_64+0x33/0x40 [ 2880.252342] ksys_write+0x1f6/0x260 [ 2880.252359] do_syscall_64+0x33/0x40 [ 2880.253309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2880.253812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2880.253823] [ 2880.253823] other info that might help us debug this: [ 2880.253823] [ 2880.254683] RIP: 0033:0x7f34960f4b19 [ 2880.255343] Chain exists of: [ 2880.255343] [ 2880.256188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2880.256574] (work_completion)(&hdev->tx_work) --> [ 2880.257464] RSP: 002b:00007f349366a188 EFLAGS: 00000246 [ 2880.258127] rfkill_global_mutex [ 2880.259121] ORIG_RAX: 00000000000001aa [ 2880.259688] --> &hdev->req_lock [ 2880.260699] RAX: ffffffffffffffda RBX: 00007f3496207f60 RCX: 00007f34960f4b19 [ 2880.261365] [ 2880.261365] [ 2880.261375] Possible unsafe locking scenario: [ 2880.261375] [ 2880.262616] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2880.263319] CPU0 CPU1 [ 2880.263329] ---- ---- [ 2880.264407] RBP: 00007f349366a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2880.265130] lock(&hdev->req_lock [ 2880.266222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2880.266789] ); [ 2880.266799] lock( [ 2880.267659] R13: 00007ffe37355ecf R14: 00007f349366a300 R15: 0000000000022000 [ 2880.268245] rfkill_global_mutex); [ 2880.287740] lock(&hdev->req_lock); [ 2880.288597] lock((work_completion)(&hdev->tx_work)); [ 2880.289326] [ 2880.289326] *** DEADLOCK *** [ 2880.289326] [ 2880.290164] 2 locks held by syz-executor.4/30723: [ 2880.290834] #0: ffffffff8561e1c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2880.292135] #1: ffff88800f674f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2880.293401] [ 2880.293401] stack backtrace: [ 2880.294041] CPU: 1 PID: 30723 Comm: syz-executor.4 Not tainted 5.10.232 #1 [ 2880.295006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2880.296174] Call Trace: [ 2880.296555] dump_stack+0x107/0x167 [ 2880.297074] check_noncircular+0x263/0x2e0 [ 2880.297675] ? register_lock_class+0xbb/0x17b0 [ 2880.298318] ? print_circular_bug+0x470/0x470 [ 2880.298948] ? stack_trace_consume_entry+0x160/0x160 [ 2880.299674] ? alloc_chain_hlocks+0x342/0x5a0 [ 2880.300302] __lock_acquire+0x29e7/0x5b00 [ 2880.300903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2880.301637] ? SOFTIRQ_verbose+0x10/0x10 [ 2880.302225] ? SOFTIRQ_verbose+0x10/0x10 [ 2880.302800] lock_acquire+0x197/0x470 [ 2880.303332] ? __flush_work+0xdd/0xa90 [ 2880.303886] ? lock_release+0x680/0x680 [ 2880.304452] ? lock_release+0x680/0x680 [ 2880.305009] ? lock_acquire+0x197/0x470 [ 2880.305569] ? find_held_lock+0x2c/0x110 [ 2880.306156] __flush_work+0x105/0xa90 [ 2880.306683] ? __flush_work+0xdd/0xa90 [ 2880.307225] ? queue_delayed_work_on+0xe0/0xe0 [ 2880.307865] ? hci_dev_do_close+0xef/0x1240 [ 2880.308468] ? __cancel_work_timer+0x2a9/0x4c0 [ 2880.309118] ? mutex_lock_io_nested+0xf30/0xf30 [ 2880.309771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2880.310507] ? __cancel_work+0x1bb/0x2b0 [ 2880.311070] ? try_to_grab_pending+0xe0/0xe0 [ 2880.311699] hci_dev_do_close+0x131/0x1240 [ 2880.312294] ? rfkill_set_block+0x18f/0x540 [ 2880.312911] ? hci_dev_open+0x350/0x350 [ 2880.313463] ? mark_held_locks+0x9e/0xe0 [ 2880.314044] hci_rfkill_set_block+0x166/0x1a0 [ 2880.314669] ? hci_power_off+0x20/0x20 [ 2880.315217] rfkill_set_block+0x1fd/0x540 [ 2880.315803] rfkill_fop_write+0x253/0x4b0 [ 2880.316384] ? rfkill_sync_work+0xa0/0xa0 [ 2880.316965] ? security_file_permission+0xb1/0xe0 [ 2880.317641] ? rfkill_sync_work+0xa0/0xa0 [ 2880.318224] vfs_write+0x29a/0xb10 [ 2880.318730] ksys_write+0x1f6/0x260 [ 2880.319240] ? __ia32_sys_read+0xb0/0xb0 [ 2880.319822] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2880.320553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2880.321271] do_syscall_64+0x33/0x40 [ 2880.321791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2880.322517] RIP: 0033:0x7ff450e18b19 [ 2880.323039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2880.325619] RSP: 002b:00007ff44e38e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2880.326691] RAX: ffffffffffffffda RBX: 00007ff450f2bf60 RCX: 00007ff450e18b19 [ 2880.327696] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000003 [ 2880.328689] RBP: 00007ff450e72f6d R08: 0000000000000000 R09: 0000000000000000 [ 2880.329679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2880.330679] R13: 00007ffecb9d051f R14: 00007ff44e38e300 R15: 0000000000022000 VM DIAGNOSIS: 02:17:35 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ddad1 RDI=ffffffff879f1140 RBP=ffffffff879f1100 RSP=ffff888047e7f670 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=000000000000002e R13=000000000000002e R14=ffffffff879f1100 R15=dffffc0000000000 RIP=ffffffff822ddb28 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f349366a700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cc25000 CR3=000000004f708000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000000d0602 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000003fd9d RBX=0000000000000001 RCX=ffffc90006e26000 RDX=0000000000040000 RSI=ffffffff8129cb51 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff8880473ff568 R8 =0000000000000000 R9 =ffffffff8567768f R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=0000000000000012 R14=ffff8880088fb480 R15=0000000000000000 RIP=ffffffff8129cb53 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff44e38e700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005572b254f8e8 CR3=000000004a6ca000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000