}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) signalfd4(r0, &(0x7f0000000080)={[0x3]}, 0x8, 0x800) (async) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0xc000, 0x3ff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='c'], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000007fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:06 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000290067200000000000000000", 0x200000e4}], 0x2) 04:33:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 55) 04:33:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000fbffffff67200000000000000000", 0x200000e4}], 0x2) [ 894.978659] audit: type=1800 audit(1674793986.859:661): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14097 res=0 04:33:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000002000067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000009fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 895.270774] FAULT_INJECTION: forcing a failure. [ 895.270774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 895.314319] CPU: 0 PID: 4862 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 895.322144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 895.331505] Call Trace: [ 895.334104] dump_stack+0x1fc/0x2ef [ 895.337747] should_fail.cold+0xa/0xf [ 895.341557] ? setup_fault_attr+0x200/0x200 [ 895.345899] __alloc_pages_nodemask+0x239/0x2890 [ 895.350661] ? sg_write.part.0+0xa57/0xe20 [ 895.354897] ? sg_write+0x69/0xa0 [ 895.358357] ? do_iter_write+0x461/0x5d0 [ 895.362422] ? vfs_writev+0x153/0x2e0 [ 895.366226] ? do_writev+0x136/0x330 [ 895.369939] ? do_syscall_64+0xf9/0x620 [ 895.373919] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 895.379289] ? mark_held_locks+0xf0/0xf0 [ 895.383365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 895.388216] ? lock_acquire+0x170/0x3c0 [ 895.392204] ? setup_fault_attr+0x200/0x200 [ 895.396542] ? check_preemption_disabled+0x41/0x280 [ 895.401579] alloc_pages_current+0x193/0x2a0 [ 895.406003] sg_build_indirect+0x3de/0xa40 [ 895.410255] sg_common_write.constprop.0+0xb6a/0x20b0 [ 895.415460] ? sg_remove_request.isra.0+0x250/0x250 [ 895.420482] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 895.425246] ? __do_page_fault+0x180/0xd60 [ 895.429489] ? retint_kernel+0x2d/0x2d [ 895.433394] sg_new_write.isra.0+0x6f4/0xa10 [ 895.437810] ? sg_rq_end_io_usercontext+0x90/0x90 [ 895.442664] ? sg_remove_request.isra.0+0x250/0x250 [ 895.447690] ? sg_write.part.0+0x373/0xe20 [ 895.451945] ? __might_fault+0x11f/0x1d0 [ 895.456018] ? lock_downgrade+0x720/0x720 [ 895.460169] ? lock_acquire+0x170/0x3c0 04:33:07 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000002a0067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="5300000dfcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000003000067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000480067200000000000000000", 0x200000e4}], 0x2) [ 895.464145] ? __might_fault+0xef/0x1d0 [ 895.468129] sg_write.part.0+0xa57/0xe20 [ 895.472201] ? sg_new_write.isra.0+0xa10/0xa10 [ 895.476787] ? __might_fault+0x11f/0x1d0 [ 895.480864] ? dump_mm+0x29c/0xca0 [ 895.484415] ? common_file_perm+0x4e5/0x850 [ 895.488755] ? apparmor_getprocattr+0x11e0/0x11e0 [ 895.493608] ? __might_fault+0x192/0x1d0 [ 895.497677] ? _copy_from_user+0xd2/0x130 [ 895.501843] ? iov_iter_advance+0x210/0xdb0 [ 895.506176] sg_write+0x69/0xa0 [ 895.509463] do_iter_write+0x461/0x5d0 [ 895.513361] vfs_writev+0x153/0x2e0 [ 895.516994] ? vfs_iter_write+0xa0/0xa0 [ 895.520971] ? lock_downgrade+0x720/0x720 [ 895.525122] ? check_preemption_disabled+0x41/0x280 [ 895.530149] ? check_preemption_disabled+0x41/0x280 [ 895.535178] ? do_dup2+0x450/0x450 [ 895.538724] ? check_preemption_disabled+0x41/0x280 [ 895.543739] ? wait_for_completion_io+0x10/0x10 [ 895.548418] do_writev+0x136/0x330 [ 895.551994] ? vfs_writev+0x2e0/0x2e0 [ 895.555796] ? trace_hardirqs_off_caller+0x6e/0x210 [ 895.560811] ? do_syscall_64+0x21/0x620 [ 895.564781] do_syscall_64+0xf9/0x620 [ 895.568568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 895.573746] RIP: 0033:0x7f2c146150c9 [ 895.577444] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 895.596335] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 895.604037] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendfile(r3, r3, 0x0, 0xffffffff009) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r7}) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) (async, rerun: 64) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003880)=0x14) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r12}) (async) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000400)) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @private2, 0x80000000}, 0x1c) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, 0x0}, 0x20000001) (async, rerun: 64) chown(&(0x7f0000000040)='./file0\x00', 0x0, r8) 04:33:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000004000067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="5300dc1ffcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000367200000000000000000", 0x200000e4}], 0x2) [ 895.611285] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 895.618541] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 895.625799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.633050] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 56) 04:33:07 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r1 = signalfd4(r0, &(0x7f0000000080)={[0x3]}, 0x8, 0x800) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0xc000, 0x3ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='c'], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) (async, rerun: 64) creat(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 64) 04:33:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000020fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000005000067200000000000000000", 0x200000e4}], 0x2) [ 895.799002] FAULT_INJECTION: forcing a failure. [ 895.799002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 895.839493] CPU: 0 PID: 4906 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 895.847318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 895.856670] Call Trace: [ 895.859265] dump_stack+0x1fc/0x2ef [ 895.862897] should_fail.cold+0xa/0xf [ 895.866698] ? setup_fault_attr+0x200/0x200 [ 895.871032] __alloc_pages_nodemask+0x239/0x2890 [ 895.875784] ? sg_write.part.0+0xa57/0xe20 [ 895.880011] ? sg_write+0x69/0xa0 [ 895.883461] ? do_iter_write+0x461/0x5d0 [ 895.887525] ? vfs_writev+0x153/0x2e0 [ 895.891325] ? do_writev+0x136/0x330 [ 895.895040] ? do_syscall_64+0xf9/0x620 [ 895.899017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 895.904398] ? mark_held_locks+0xf0/0xf0 [ 895.908470] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 895.913317] ? lock_acquire+0x170/0x3c0 [ 895.917295] ? setup_fault_attr+0x200/0x200 [ 895.921622] ? check_preemption_disabled+0x41/0x280 [ 895.926649] alloc_pages_current+0x193/0x2a0 [ 895.931065] sg_build_indirect+0x3de/0xa40 [ 895.935311] sg_common_write.constprop.0+0xb6a/0x20b0 [ 895.940513] ? sg_remove_request.isra.0+0x250/0x250 [ 895.945529] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 895.950291] ? __do_page_fault+0x180/0xd60 [ 895.954522] ? retint_kernel+0x2d/0x2d [ 895.958426] sg_new_write.isra.0+0x6f4/0xa10 [ 895.962844] ? sg_rq_end_io_usercontext+0x90/0x90 [ 895.967693] ? sg_remove_request.isra.0+0x250/0x250 [ 895.972701] ? sg_write.part.0+0x373/0xe20 [ 895.976940] ? __might_fault+0x11f/0x1d0 [ 895.981010] ? lock_downgrade+0x720/0x720 [ 895.985152] ? lock_acquire+0x170/0x3c0 [ 895.989122] ? __might_fault+0xef/0x1d0 [ 895.993107] sg_write.part.0+0xa57/0xe20 [ 895.997169] ? sg_new_write.isra.0+0xa10/0xa10 [ 896.001758] ? __might_fault+0x11f/0x1d0 [ 896.005823] ? dump_mm+0x29c/0xca0 [ 896.009372] ? common_file_perm+0x4e5/0x850 [ 896.013697] ? apparmor_getprocattr+0x11e0/0x11e0 [ 896.014101] audit: type=1800 audit(1674793987.879:662): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14562 res=0 04:33:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendfile(r3, r3, 0x0, 0xffffffff009) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r7}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) r9 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003880)=0x14) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r12}) (async) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000400)) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @private2, 0x80000000}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, 0x0}, 0x20000001) (async, rerun: 32) chown(&(0x7f0000000040)='./file0\x00', 0x0, r8) (rerun: 32) 04:33:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000008000067200000000000000000", 0x200000e4}], 0x2) [ 896.018529] ? __might_fault+0x192/0x1d0 [ 896.018552] ? _copy_from_user+0xd2/0x130 [ 896.018570] ? iov_iter_advance+0x210/0xdb0 [ 896.018587] sg_write+0x69/0xa0 [ 896.018606] do_iter_write+0x461/0x5d0 [ 896.057832] vfs_writev+0x153/0x2e0 [ 896.061476] ? vfs_iter_write+0xa0/0xa0 [ 896.065454] ? lock_downgrade+0x720/0x720 [ 896.069609] ? check_preemption_disabled+0x41/0x280 [ 896.074637] ? check_preemption_disabled+0x41/0x280 [ 896.079669] ? do_dup2+0x450/0x450 [ 896.083229] ? check_preemption_disabled+0x41/0x280 04:33:08 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000567200000000000000000", 0x200000e4}], 0x2) [ 896.088252] ? wait_for_completion_io+0x10/0x10 [ 896.092939] do_writev+0x136/0x330 [ 896.096492] ? vfs_writev+0x2e0/0x2e0 [ 896.100310] ? trace_hardirqs_off_caller+0x6e/0x210 [ 896.105335] ? do_syscall_64+0x21/0x620 [ 896.109318] do_syscall_64+0xf9/0x620 [ 896.113127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.118323] RIP: 0033:0x7f2c146150c9 [ 896.122038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 04:33:08 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000767200000000000000000", 0x200000e4}], 0x2) 04:33:08 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000967200000000000000000", 0x200000e4}], 0x2) [ 896.140950] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 896.148672] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 896.155942] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 896.163212] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.170483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 896.177759] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000088fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e3c23643b79e785c181c862f8add801cce86dec2bdbba78fe5203e673e0b7fe798e09c78156354d701c627fa3f384b467e61c4aa714fd7a2f07124bde96195aa6ac3a378cf731cef6bcec19f3d01c633f6539ceacde01015deb78c0ccba7921833ab590ea63ddbe04b1335bddf24125a00eb5f2c877d7c277df6bf2b0ff3635a76e015f04e7a0580f542e0c10e5953c0a045b7ffc262dd643526e24b868ef9c28a228692071781024919c9"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 57) 04:33:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000009000067200000000000000000", 0x200000e4}], 0x2) 04:33:08 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000d67200000000000000000", 0x200000e4}], 0x2) 04:33:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53001fdcfcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:08 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000dc1f67200000000000000000", 0x200000e4}], 0x2) [ 896.382386] FAULT_INJECTION: forcing a failure. [ 896.382386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 896.408016] CPU: 1 PID: 4948 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 896.415836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 896.425192] Call Trace: [ 896.427797] dump_stack+0x1fc/0x2ef [ 896.431436] should_fail.cold+0xa/0xf [ 896.435252] ? setup_fault_attr+0x200/0x200 [ 896.439587] __alloc_pages_nodemask+0x239/0x2890 [ 896.444334] ? sg_write.part.0+0xa57/0xe20 [ 896.448559] ? sg_write+0x69/0xa0 [ 896.452001] ? do_iter_write+0x461/0x5d0 [ 896.456054] ? vfs_writev+0x153/0x2e0 [ 896.459846] ? do_writev+0x136/0x330 [ 896.463552] ? do_syscall_64+0xf9/0x620 [ 896.467517] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.472887] ? mark_held_locks+0xf0/0xf0 [ 896.476947] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 896.481781] ? lock_acquire+0x170/0x3c0 [ 896.485755] ? setup_fault_attr+0x200/0x200 [ 896.490072] ? check_preemption_disabled+0x41/0x280 [ 896.495086] alloc_pages_current+0x193/0x2a0 [ 896.499484] sg_build_indirect+0x3de/0xa40 [ 896.503711] sg_common_write.constprop.0+0xb6a/0x20b0 [ 896.508911] ? sg_remove_request.isra.0+0x250/0x250 [ 896.513915] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 896.518669] ? __do_page_fault+0x180/0xd60 [ 896.522897] ? retint_kernel+0x2d/0x2d [ 896.526786] sg_new_write.isra.0+0x6f4/0xa10 [ 896.531185] ? sg_rq_end_io_usercontext+0x90/0x90 [ 896.536023] ? sg_remove_request.isra.0+0x250/0x250 [ 896.541024] ? sg_write.part.0+0x373/0xe20 [ 896.545247] ? __might_fault+0x11f/0x1d0 [ 896.549314] ? lock_downgrade+0x720/0x720 [ 896.553453] ? lock_acquire+0x170/0x3c0 [ 896.557413] ? __might_fault+0xef/0x1d0 [ 896.561379] sg_write.part.0+0xa57/0xe20 [ 896.565436] ? sg_new_write.isra.0+0xa10/0xa10 [ 896.570012] ? __might_fault+0x11f/0x1d0 [ 896.574062] ? dump_mm+0x29c/0xca0 [ 896.577597] ? common_file_perm+0x4e5/0x850 [ 896.581909] ? apparmor_getprocattr+0x11e0/0x11e0 [ 896.586752] ? __might_fault+0x192/0x1d0 [ 896.590805] ? _copy_from_user+0xd2/0x130 [ 896.594947] ? iov_iter_advance+0x210/0xdb0 [ 896.599255] sg_write+0x69/0xa0 [ 896.602616] do_iter_write+0x461/0x5d0 [ 896.606496] vfs_writev+0x153/0x2e0 [ 896.610112] ? vfs_iter_write+0xa0/0xa0 [ 896.614075] ? lock_downgrade+0x720/0x720 [ 896.618209] ? check_preemption_disabled+0x41/0x280 [ 896.623211] ? check_preemption_disabled+0x41/0x280 [ 896.628222] ? do_dup2+0x450/0x450 [ 896.631751] ? check_preemption_disabled+0x41/0x280 [ 896.636760] ? wait_for_completion_io+0x10/0x10 [ 896.641440] do_writev+0x136/0x330 [ 896.644967] ? vfs_writev+0x2e0/0x2e0 [ 896.648759] ? trace_hardirqs_off_caller+0x6e/0x210 [ 896.653760] ? do_syscall_64+0x21/0x620 [ 896.657720] do_syscall_64+0xf9/0x620 [ 896.661512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.666686] RIP: 0033:0x7f2c146150c9 [ 896.670384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 896.689265] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 896.696956] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 896.704220] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 896.711471] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.718809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 896.726063] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000005000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000002067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000d000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000002fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 58) 04:33:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e3c23643b79e785c181c862f8add801cce86dec2bdbba78fe5203e673e0b7fe798e09c78156354d701c627fa3f384b467e61c4aa714fd7a2f07124bde96195aa6ac3a378cf731cef6bcec19f3d01c633f6539ceacde01015deb78c0ccba7921833ab590ea63ddbe04b1335bddf24125a00eb5f2c877d7c277df6bf2b0ff3635a76e015f04e7a0580f542e0c10e5953c0a045b7ffc262dd643526e24b868ef9c28a228692071781024919c9"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e3c23643b79e785c181c862f8add801cce86dec2bdbba78fe5203e673e0b7fe798e09c78156354d701c627fa3f384b467e61c4aa714fd7a2f07124bde96195aa6ac3a378cf731cef6bcec19f3d01c633f6539ceacde01015deb78c0ccba7921833ab590ea63ddbe04b1335bddf24125a00eb5f2c877d7c277df6bf2b0ff3635a76e015f04e7a0580f542e0c10e5953c0a045b7ffc262dd643526e24b868ef9c28a228692071781024919c9"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000003fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000048000067200000000000000000", 0x200000e4}], 0x2) [ 897.104112] FAULT_INJECTION: forcing a failure. [ 897.104112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 897.125273] CPU: 0 PID: 4973 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 897.133102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 897.142459] Call Trace: [ 897.145066] dump_stack+0x1fc/0x2ef [ 897.148712] should_fail.cold+0xa/0xf 04:33:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000005000067200000000000000000", 0x200000e4}], 0x2) [ 897.152523] ? setup_fault_attr+0x200/0x200 [ 897.156867] __alloc_pages_nodemask+0x239/0x2890 [ 897.161648] ? sg_write.part.0+0xa57/0xe20 [ 897.165897] ? sg_write+0x69/0xa0 [ 897.169350] ? do_iter_write+0x461/0x5d0 [ 897.173416] ? vfs_writev+0x153/0x2e0 [ 897.177219] ? do_writev+0x136/0x330 [ 897.180935] ? do_syscall_64+0xf9/0x620 [ 897.184911] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.190283] ? mark_held_locks+0xf0/0xf0 [ 897.194360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 897.199211] ? lock_acquire+0x170/0x3c0 04:33:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000005000067200000000000000000", 0x200000e4}], 0x2) [ 897.203201] ? setup_fault_attr+0x200/0x200 [ 897.207528] ? check_preemption_disabled+0x41/0x280 [ 897.212561] alloc_pages_current+0x193/0x2a0 [ 897.216979] sg_build_indirect+0x3de/0xa40 [ 897.221233] sg_common_write.constprop.0+0xb6a/0x20b0 [ 897.226435] ? sg_remove_request.isra.0+0x250/0x250 [ 897.231453] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 897.236220] ? __do_page_fault+0x180/0xd60 [ 897.240459] ? retint_kernel+0x2d/0x2d [ 897.244366] sg_new_write.isra.0+0x6f4/0xa10 [ 897.248799] ? sg_rq_end_io_usercontext+0x90/0x90 [ 897.253660] ? sg_remove_request.isra.0+0x250/0x250 [ 897.258684] ? sg_write.part.0+0x373/0xe20 [ 897.262931] ? __might_fault+0x11f/0x1d0 [ 897.267008] ? lock_downgrade+0x720/0x720 [ 897.271180] ? lock_acquire+0x170/0x3c0 [ 897.275160] ? __might_fault+0xef/0x1d0 [ 897.279152] sg_write.part.0+0xa57/0xe20 [ 897.283224] ? sg_new_write.isra.0+0xa10/0xa10 [ 897.287848] ? __might_fault+0x11f/0x1d0 [ 897.291915] ? dump_mm+0x29c/0xca0 [ 897.295470] ? common_file_perm+0x4e5/0x850 [ 897.299812] ? apparmor_getprocattr+0x11e0/0x11e0 04:33:09 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60932b1c00142b00fe80000000000000000000c943c38d1ebe87459ce800000000bbfe8000000000000000000000000000aa0000003a", @ANYRES32=0x41424344, @ANYRES64=r0], 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x6}, 0x80d4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSPTLCK(r3, 0x5423, &(0x7f0000000000)=0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250f0000003c0001801400020070696d367265673100000000000000000800030000000000080003000000000014000200766c616e30000000000000000000000018000180140002006e657464657673696d300000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200776732000000000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="740001800800030001000000080003000200000014000200726f7365300000000000000000000000140002006261746164765f736c6176655f3000001400020073697430000000000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006d616376746170300000000000000000080003000000000068000180080003000200000008000300020000001400020067656e65766530000000000000000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x1cc}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x3f, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0x3, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x3}, 0x1884a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x2) 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000068000067200000000000000000", 0x200000e4}], 0x2) [ 897.304664] ? __might_fault+0x192/0x1d0 [ 897.308732] ? _copy_from_user+0xd2/0x130 [ 897.312885] ? iov_iter_advance+0x210/0xdb0 [ 897.317217] sg_write+0x69/0xa0 [ 897.320539] do_iter_write+0x461/0x5d0 [ 897.324440] vfs_writev+0x153/0x2e0 [ 897.328077] ? vfs_iter_write+0xa0/0xa0 [ 897.332058] ? lock_downgrade+0x720/0x720 [ 897.336213] ? check_preemption_disabled+0x41/0x280 [ 897.341243] ? check_preemption_disabled+0x41/0x280 [ 897.346276] ? do_dup2+0x450/0x450 [ 897.349830] ? check_preemption_disabled+0x41/0x280 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000069000067200000000000000000", 0x200000e4}], 0x2) [ 897.354854] ? wait_for_completion_io+0x10/0x10 [ 897.359629] do_writev+0x136/0x330 [ 897.363178] ? vfs_writev+0x2e0/0x2e0 [ 897.366994] ? trace_hardirqs_off_caller+0x6e/0x210 [ 897.372018] ? do_syscall_64+0x21/0x620 [ 897.376008] do_syscall_64+0xf9/0x620 [ 897.379828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.385023] RIP: 0033:0x7f2c146150c9 04:33:09 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000002967200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60932b1c00142b00fe80000000000000000000c943c38d1ebe87459ce800000000bbfe8000000000000000000000000000aa0000003a", @ANYRES32=0x41424344, @ANYRES64=r0], 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x6}, 0x80d4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSPTLCK(r3, 0x5423, &(0x7f0000000000)=0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250f0000003c0001801400020070696d367265673100000000000000000800030000000000080003000000000014000200766c616e30000000000000000000000018000180140002006e657464657673696d300000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200776732000000000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="740001800800030001000000080003000200000014000200726f7365300000000000000000000000140002006261746164765f736c6176655f3000001400020073697430000000000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006d616376746170300000000000000000080003000000000068000180080003000200000008000300020000001400020067656e65766530000000000000000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x1cc}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x3f, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0x3, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x3}, 0x1884a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60932b1c00142b00fe80000000000000000000c943c38d1ebe87459ce800000000bbfe8000000000000000000000000000aa0000003a", @ANYRES32=0x41424344, @ANYRES64=r0], 0x0) (async) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x6}, 0x80d4) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSPTLCK(r3, 0x5423, &(0x7f0000000000)=0x1) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250f0000003c0001801400020070696d367265673100000000000000000800030000000000080003000000000014000200766c616e30000000000000000000000018000180140002006e657464657673696d300000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200776732000000000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="740001800800030001000000080003000200000014000200726f7365300000000000000000000000140002006261746164765f736c6176655f3000001400020073697430000000000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006d616376746170300000000000000000080003000000000068000180080003000200000008000300020000001400020067656e65766530000000000000000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x1cc}}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) getpgrp(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x3f, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0x3, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x3}, 0x1884a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x2) (async) [ 897.388744] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 897.407650] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 897.415371] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 897.422652] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 897.429935] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 897.437227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 897.444506] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000030067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 59) 04:33:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e3c23643b79e785c181c862f8add801cce86dec2bdbba78fe5203e673e0b7fe798e09c78156354d701c627fa3f384b467e61c4aa714fd7a2f07124bde96195aa6ac3a378cf731cef6bcec19f3d01c633f6539ceacde01015deb78c0ccba7921833ab590ea63ddbe04b1335bddf24125a00eb5f2c877d7c277df6bf2b0ff3635a76e015f04e7a0580f542e0c10e5953c0a045b7ffc262dd643526e24b868ef9c28a228692071781024919c9"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000004fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000002a67200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000050067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60932b1c00142b00fe80000000000000000000c943c38d1ebe87459ce800000000bbfe8000000000000000000000000000aa0000003a", @ANYRES32=0x41424344, @ANYRES64=r0], 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x6}, 0x80d4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSPTLCK(r3, 0x5423, &(0x7f0000000000)=0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250f0000003c0001801400020070696d367265673100000000000000000800030000000000080003000000000014000200766c616e30000000000000000000000018000180140002006e657464657673696d300000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200776732000000000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="740001800800030001000000080003000200000014000200726f7365300000000000000000000000140002006261746164765f736c6176655f3000001400020073697430000000000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006d616376746170300000000000000000080003000000000068000180080003000200000008000300020000001400020067656e65766530000000000000000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x1cc}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x3f, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0x3, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x3}, 0x1884a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60932b1c00142b00fe80000000000000000000c943c38d1ebe87459ce800000000bbfe8000000000000000000000000000aa0000003a", @ANYRES32=0x41424344, @ANYRES64=r0], 0x0) (async) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf2509000000100002800c0003800800020000080000bc0006800400050032000300d651bf512c56dbf491aa263f69d37a95fda6fed97e7b1bf97d4b61b7d79b84e6b60964b0d06fd8f909bd7b3da47e00007c000300d7765510957ef33a1696a629019c0e270bf15002cc7ec6757cafcea1e9047be0fc804bda25369e403ae24ccc448af3bde3a461f94934d8e89988c47fb66ddd50fe7a6fffeb926e0779fc6d857552c29f0a3f12d114e053855eea0c7beda72210a348612c73c7838d25740dba20204b8d0d2a84816e80d23d9cda0d1ee071e53e8b20bb621b6e040002004400018008000300f8ff55ff38000400200001000a004e2000006aef20010000000000000000000000000002010100001400020002004e200a0101020000000000000000240004801300010062726f6164636173742d6c696e6b00000900010073797a30000000006317c5c5b4e9857c8423ffc801fca43970dd1d01b69c209bb868ab10d97bc0555af39ce1a89a7168936e94df1bb8e4d6f226ed2263ffcda4504a7ba6b11e0b365ce1aebbed724b27d596c9b47615ce1ef051e58da39346ae6e126a1d71c15ae34972bf44f1c017bee3761dad1ad8e41efa36edb9f152"], 0x148}, 0x1, 0x0, 0x0, 0x6}, 0x80d4) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSPTLCK(r3, 0x5423, &(0x7f0000000000)=0x1) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250f0000003c0001801400020070696d367265673100000000000000000800030000000000080003000000000014000200766c616e30000000000000000000000018000180140002006e657464657673696d300000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200776732000000000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="740001800800030001000000080003000200000014000200726f7365300000000000000000000000140002006261746164765f736c6176655f3000001400020073697430000000000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006d616376746170300000000000000000080003000000000068000180080003000200000008000300020000001400020067656e65766530000000000000000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x1cc}}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) getpgrp(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x3f, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0x3, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x3}, 0x1884a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x2) (async) [ 897.620700] FAULT_INJECTION: forcing a failure. [ 897.620700] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 897.678447] CPU: 0 PID: 5037 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 897.686275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 897.695630] Call Trace: [ 897.698237] dump_stack+0x1fc/0x2ef [ 897.701883] should_fail.cold+0xa/0xf [ 897.705697] ? setup_fault_attr+0x200/0x200 [ 897.710035] __alloc_pages_nodemask+0x239/0x2890 [ 897.714795] ? sg_write.part.0+0xa57/0xe20 [ 897.719029] ? sg_write+0x69/0xa0 [ 897.722489] ? do_iter_write+0x461/0x5d0 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000090067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000005fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 897.726553] ? vfs_writev+0x153/0x2e0 [ 897.730358] ? do_writev+0x136/0x330 [ 897.734076] ? do_syscall_64+0xf9/0x620 [ 897.738055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.743425] ? mark_held_locks+0xf0/0xf0 [ 897.747504] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 897.752350] ? lock_acquire+0x170/0x3c0 [ 897.756335] ? setup_fault_attr+0x200/0x200 [ 897.760663] ? check_preemption_disabled+0x41/0x280 [ 897.765696] alloc_pages_current+0x193/0x2a0 [ 897.770109] sg_build_indirect+0x3de/0xa40 04:33:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000007fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000d0067200000000000000000", 0x200000e4}], 0x2) [ 897.774361] sg_common_write.constprop.0+0xb6a/0x20b0 [ 897.779566] ? sg_remove_request.isra.0+0x250/0x250 [ 897.784584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 897.789343] ? __do_page_fault+0x180/0xd60 [ 897.793581] ? retint_kernel+0x2d/0x2d [ 897.797487] sg_new_write.isra.0+0x6f4/0xa10 [ 897.801909] ? sg_rq_end_io_usercontext+0x90/0x90 [ 897.806765] ? sg_remove_request.isra.0+0x250/0x250 [ 897.811777] ? sg_write.part.0+0x373/0xe20 [ 897.816019] ? __might_fault+0x11f/0x1d0 [ 897.820098] ? lock_downgrade+0x720/0x720 [ 897.824261] ? lock_acquire+0x170/0x3c0 04:33:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000008fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000dc1f0067200000000000000000", 0x200000e4}], 0x2) [ 897.828248] ? __might_fault+0xef/0x1d0 [ 897.832250] sg_write.part.0+0xa57/0xe20 [ 897.836319] ? sg_new_write.isra.0+0xa10/0xa10 [ 897.840904] ? __might_fault+0x11f/0x1d0 [ 897.844976] ? dump_mm+0x29c/0xca0 [ 897.848528] ? common_file_perm+0x4e5/0x850 [ 897.852860] ? apparmor_getprocattr+0x11e0/0x11e0 [ 897.857707] ? __might_fault+0x192/0x1d0 [ 897.861773] ? _copy_from_user+0xd2/0x130 [ 897.865928] ? iov_iter_advance+0x210/0xdb0 [ 897.870252] sg_write+0x69/0xa0 [ 897.873537] do_iter_write+0x461/0x5d0 [ 897.877441] vfs_writev+0x153/0x2e0 [ 897.881074] ? vfs_iter_write+0xa0/0xa0 [ 897.885055] ? lock_downgrade+0x720/0x720 [ 897.889211] ? check_preemption_disabled+0x41/0x280 [ 897.894239] ? check_preemption_disabled+0x41/0x280 [ 897.899270] ? do_dup2+0x450/0x450 [ 897.902823] ? check_preemption_disabled+0x41/0x280 [ 897.907852] ? wait_for_completion_io+0x10/0x10 [ 897.912537] do_writev+0x136/0x330 [ 897.916084] ? vfs_writev+0x2e0/0x2e0 [ 897.919891] ? trace_hardirqs_off_caller+0x6e/0x210 [ 897.924911] ? do_syscall_64+0x21/0x620 [ 897.928892] do_syscall_64+0xf9/0x620 [ 897.932701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.937889] RIP: 0033:0x7f2c146150c9 [ 897.941604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 897.960503] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 897.968214] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 897.975482] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 897.982750] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 897.990022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 897.997292] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 60) 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000009fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000200067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000004867200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 5: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="04000019000080f8a2e263e2002c453c3e10975d00000000e75fb9f0254e9f6131e046894c1cf564ece2d596cabdb52153b01f1877cd214d49293fa1537eff04085492ba39568ce372ec41a5c006030000000000009100ed9d3c0f9527f7d29b4a4f5f65f1d0e86709e4070246fbdd98cca8088cad566e86e72ef9ff17c1f5f7e92d0d072fd9e78ea4b243bdfbfb125138279496a5f61d3ed4929f16b264855f27cdea8679cb481167983458c4d67cabf5702f97"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) write(0xffffffffffffffff, &(0x7f00000005c0)="09a3acd38e6e9013fad1950e242e1d4a662be5c7f0ddad4dc3bfaca26ae9c5fc87206667d97397d424c746fdeb7e8fef94deab05525416ca6fc14a6dc62d60838d114461fc01a982b3fcec544503514124bc53ddff9181a799b5343bf264d519d36b61effc40d1c327bca225572c13f1c081ceded249555ff55aa09fc842c46aca8470b5bbefd744a0fdac5caa4fa73812fdf5b1a8ce908f734b4e3890dd0cd8ea83454e6150950beb9239501725a689f794511f7250b328bc5afef95aab8f8146aa45310443a2a88ccc984961ac1e7b19a3a1c553ee01cc99568f5a20d05300e6fd9c26b234b3b71e07e1af94d0156edccb9ce51c", 0xf5) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0xd0e0000, 0x128, 0x100, 0x1c0, 0x1d8, 0x1d8, 0x1c0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x11}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'tunl0\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x8}, 0x700) 04:33:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10500, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f00000002c0)={0x0, 0xb4, ""/180}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xec, 0x8], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000005c0)) 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="5300000dfcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000001fdc67200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000480067200000000000000000", 0x200000e4}], 0x2) [ 898.173799] xt_l2tp: invalid flags combination: 0 [ 898.180655] FAULT_INJECTION: forcing a failure. [ 898.180655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000088fcffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000feffffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 898.256303] CPU: 0 PID: 5100 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 898.264141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 898.273504] Call Trace: [ 898.276105] dump_stack+0x1fc/0x2ef [ 898.279742] should_fail.cold+0xa/0xf [ 898.283554] ? setup_fault_attr+0x200/0x200 [ 898.287892] __alloc_pages_nodemask+0x239/0x2890 [ 898.292655] ? sg_write.part.0+0xa57/0xe20 [ 898.296894] ? sg_write+0x69/0xa0 [ 898.300365] ? do_iter_write+0x461/0x5d0 [ 898.304433] ? vfs_writev+0x153/0x2e0 [ 898.308239] ? do_writev+0x136/0x330 [ 898.311966] ? do_syscall_64+0xf9/0x620 [ 898.315948] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 898.321327] ? mark_held_locks+0xf0/0xf0 [ 898.325401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 898.330266] ? lock_acquire+0x170/0x3c0 [ 898.334278] ? setup_fault_attr+0x200/0x200 [ 898.338613] ? check_preemption_disabled+0x41/0x280 [ 898.343644] alloc_pages_current+0x193/0x2a0 [ 898.348061] sg_build_indirect+0x3de/0xa40 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fc89ffff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 898.352317] sg_common_write.constprop.0+0xb6a/0x20b0 [ 898.357523] ? sg_remove_request.isra.0+0x250/0x250 [ 898.362543] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 898.367305] ? __do_page_fault+0x180/0xd60 [ 898.371538] ? retint_kernel+0x2d/0x2d [ 898.375433] sg_new_write.isra.0+0x6f4/0xa10 [ 898.379846] ? sg_rq_end_io_usercontext+0x90/0x90 [ 898.384701] ? sg_remove_request.isra.0+0x250/0x250 [ 898.389705] ? sg_write.part.0+0x373/0xe20 [ 898.393935] ? __might_fault+0x11f/0x1d0 [ 898.397991] ? lock_downgrade+0x720/0x720 [ 898.402128] ? lock_acquire+0x170/0x3c0 [ 898.406089] ? __might_fault+0xef/0x1d0 [ 898.410060] sg_write.part.0+0xa57/0xe20 [ 898.414113] ? sg_new_write.isra.0+0xa10/0xa10 [ 898.418681] ? __might_fault+0x11f/0x1d0 [ 898.422737] ? dump_mm+0x29c/0xca0 [ 898.426274] ? common_file_perm+0x4e5/0x850 [ 898.430612] ? apparmor_getprocattr+0x11e0/0x11e0 [ 898.435456] ? __might_fault+0x192/0x1d0 [ 898.439508] ? _copy_from_user+0xd2/0x130 [ 898.443652] ? iov_iter_advance+0x210/0xdb0 [ 898.447967] sg_write+0x69/0xa0 [ 898.451243] do_iter_write+0x461/0x5d0 [ 898.455129] vfs_writev+0x153/0x2e0 [ 898.458742] ? vfs_iter_write+0xa0/0xa0 [ 898.462710] ? lock_downgrade+0x720/0x720 [ 898.466849] ? check_preemption_disabled+0x41/0x280 [ 898.471853] ? check_preemption_disabled+0x41/0x280 [ 898.476861] ? do_dup2+0x450/0x450 [ 898.480389] ? check_preemption_disabled+0x41/0x280 [ 898.485406] ? wait_for_completion_io+0x10/0x10 [ 898.490084] do_writev+0x136/0x330 [ 898.493616] ? vfs_writev+0x2e0/0x2e0 [ 898.497414] ? trace_hardirqs_off_caller+0x6e/0x210 [ 898.502421] ? do_syscall_64+0x21/0x620 [ 898.506380] do_syscall_64+0xf9/0x620 [ 898.510172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 898.515347] RIP: 0033:0x7f2c146150c9 [ 898.519083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 898.537968] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 898.545664] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 898.552917] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 898.560172] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 898.567423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.574677] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 61) 04:33:10 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000000210000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10500, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f00000002c0)={0x0, 0xb4, ""/180}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xec, 0x8], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000005c0)) 04:33:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000680067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 5: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="04000019000080f8a2e263e2002c453c3e10975d00000000e75fb9f0254e9f6131e046894c1cf564ece2d596cabdb52153b01f1877cd214d49293fa1537eff04085492ba39568ce372ec41a5c006030000000000009100ed9d3c0f9527f7d29b4a4f5f65f1d0e86709e4070246fbdd98cca8088cad566e86e72ef9ff17c1f5f7e92d0d072fd9e78ea4b243bdfbfb125138279496a5f61d3ed4929f16b264855f27cdea8679cb481167983458c4d67cabf5702f97"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) write(0xffffffffffffffff, &(0x7f00000005c0)="09a3acd38e6e9013fad1950e242e1d4a662be5c7f0ddad4dc3bfaca26ae9c5fc87206667d97397d424c746fdeb7e8fef94deab05525416ca6fc14a6dc62d60838d114461fc01a982b3fcec544503514124bc53ddff9181a799b5343bf264d519d36b61effc40d1c327bca225572c13f1c081ceded249555ff55aa09fc842c46aca8470b5bbefd744a0fdac5caa4fa73812fdf5b1a8ce908f734b4e3890dd0cd8ea83454e6150950beb9239501725a689f794511f7250b328bc5afef95aab8f8146aa45310443a2a88ccc984961ac1e7b19a3a1c553ee01cc99568f5a20d05300e6fd9c26b234b3b71e07e1af94d0156edccb9ce51c", 0xf5) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0xd0e0000, 0x128, 0x100, 0x1c0, 0x1d8, 0x1d8, 0x1c0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x11}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'tunl0\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x8}, 0x700) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="04000019000080f8a2e263e2002c453c3e10975d00000000e75fb9f0254e9f6131e046894c1cf564ece2d596cabdb52153b01f1877cd214d49293fa1537eff04085492ba39568ce372ec41a5c006030000000000009100ed9d3c0f9527f7d29b4a4f5f65f1d0e86709e4070246fbdd98cca8088cad566e86e72ef9ff17c1f5f7e92d0d072fd9e78ea4b243bdfbfb125138279496a5f61d3ed4929f16b264855f27cdea8679cb481167983458c4d67cabf5702f97"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) write(0xffffffffffffffff, &(0x7f00000005c0)="09a3acd38e6e9013fad1950e242e1d4a662be5c7f0ddad4dc3bfaca26ae9c5fc87206667d97397d424c746fdeb7e8fef94deab05525416ca6fc14a6dc62d60838d114461fc01a982b3fcec544503514124bc53ddff9181a799b5343bf264d519d36b61effc40d1c327bca225572c13f1c081ceded249555ff55aa09fc842c46aca8470b5bbefd744a0fdac5caa4fa73812fdf5b1a8ce908f734b4e3890dd0cd8ea83454e6150950beb9239501725a689f794511f7250b328bc5afef95aab8f8146aa45310443a2a88ccc984961ac1e7b19a3a1c553ee01cc99568f5a20d05300e6fd9c26b234b3b71e07e1af94d0156edccb9ce51c", 0xf5) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0xd0e0000, 0x128, 0x100, 0x1c0, 0x1d8, 0x1d8, 0x1c0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x11}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'tunl0\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x8}, 0x700) (async) 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcff89ff1b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000b00fdf9b7f000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000690067200000000000000000", 0x200000e4}], 0x2) 04:33:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10500, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f00000002c0)={0x0, 0xb4, ""/180}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xec, 0x8], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000005c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10500, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f00000002c0)={0x0, 0xb4, ""/180}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xec, 0x8], 0x2, 0x800}) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000005c0)) (async) 04:33:10 executing program 5: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="04000019000080f8a2e263e2002c453c3e10975d00000000e75fb9f0254e9f6131e046894c1cf564ece2d596cabdb52153b01f1877cd214d49293fa1537eff04085492ba39568ce372ec41a5c006030000000000009100ed9d3c0f9527f7d29b4a4f5f65f1d0e86709e4070246fbdd98cca8088cad566e86e72ef9ff17c1f5f7e92d0d072fd9e78ea4b243bdfbfb125138279496a5f61d3ed4929f16b264855f27cdea8679cb481167983458c4d67cabf5702f97"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) write(0xffffffffffffffff, &(0x7f00000005c0)="09a3acd38e6e9013fad1950e242e1d4a662be5c7f0ddad4dc3bfaca26ae9c5fc87206667d97397d424c746fdeb7e8fef94deab05525416ca6fc14a6dc62d60838d114461fc01a982b3fcec544503514124bc53ddff9181a799b5343bf264d519d36b61effc40d1c327bca225572c13f1c081ceded249555ff55aa09fc842c46aca8470b5bbefd744a0fdac5caa4fa73812fdf5b1a8ce908f734b4e3890dd0cd8ea83454e6150950beb9239501725a689f794511f7250b328bc5afef95aab8f8146aa45310443a2a88ccc984961ac1e7b19a3a1c553ee01cc99568f5a20d05300e6fd9c26b234b3b71e07e1af94d0156edccb9ce51c", 0xf5) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0xd0e0000, 0x128, 0x100, 0x1c0, 0x1d8, 0x1d8, 0x1c0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x11}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'tunl0\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x8}, 0x700) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="04000019000080f8a2e263e2002c453c3e10975d00000000e75fb9f0254e9f6131e046894c1cf564ece2d596cabdb52153b01f1877cd214d49293fa1537eff04085492ba39568ce372ec41a5c006030000000000009100ed9d3c0f9527f7d29b4a4f5f65f1d0e86709e4070246fbdd98cca8088cad566e86e72ef9ff17c1f5f7e92d0d072fd9e78ea4b243bdfbfb125138279496a5f61d3ed4929f16b264855f27cdea8679cb481167983458c4d67cabf5702f97"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) write(0xffffffffffffffff, &(0x7f00000005c0)="09a3acd38e6e9013fad1950e242e1d4a662be5c7f0ddad4dc3bfaca26ae9c5fc87206667d97397d424c746fdeb7e8fef94deab05525416ca6fc14a6dc62d60838d114461fc01a982b3fcec544503514124bc53ddff9181a799b5343bf264d519d36b61effc40d1c327bca225572c13f1c081ceded249555ff55aa09fc842c46aca8470b5bbefd744a0fdac5caa4fa73812fdf5b1a8ce908f734b4e3890dd0cd8ea83454e6150950beb9239501725a689f794511f7250b328bc5afef95aab8f8146aa45310443a2a88ccc984961ac1e7b19a3a1c553ee01cc99568f5a20d05300e6fd9c26b234b3b71e07e1af94d0156edccb9ce51c", 0xf5) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0xd0e0000, 0x128, 0x100, 0x1c0, 0x1d8, 0x1d8, 0x1c0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x11}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'tunl0\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x8}, 0x700) (async) 04:33:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffff891b044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 898.787278] xt_l2tp: invalid flags combination: 0 [ 898.807218] FAULT_INJECTION: forcing a failure. [ 898.807218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 898.860906] CPU: 1 PID: 5139 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 898.868725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 898.878077] Call Trace: [ 898.880679] dump_stack+0x1fc/0x2ef [ 898.884325] should_fail.cold+0xa/0xf [ 898.888137] ? setup_fault_attr+0x200/0x200 [ 898.892490] __alloc_pages_nodemask+0x239/0x2890 [ 898.897251] ? sg_write.part.0+0xa57/0xe20 [ 898.901500] ? sg_write+0x69/0xa0 [ 898.904962] ? do_iter_write+0x461/0x5d0 [ 898.909023] ? vfs_writev+0x153/0x2e0 [ 898.912824] ? do_writev+0x136/0x330 [ 898.916551] ? do_syscall_64+0xf9/0x620 [ 898.920533] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 898.925906] ? mark_held_locks+0xf0/0xf0 [ 898.929982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 898.934832] ? lock_acquire+0x170/0x3c0 [ 898.938815] ? setup_fault_attr+0x200/0x200 [ 898.943134] ? check_preemption_disabled+0x41/0x280 [ 898.948169] alloc_pages_current+0x193/0x2a0 [ 898.952582] sg_build_indirect+0x3de/0xa40 [ 898.956835] sg_common_write.constprop.0+0xb6a/0x20b0 [ 898.962039] ? sg_remove_request.isra.0+0x250/0x250 [ 898.967061] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 898.971828] ? __do_page_fault+0x180/0xd60 [ 898.976066] ? retint_kernel+0x2d/0x2d [ 898.979971] sg_new_write.isra.0+0x6f4/0xa10 [ 898.984385] ? sg_rq_end_io_usercontext+0x90/0x90 [ 898.989240] ? sg_remove_request.isra.0+0x250/0x250 [ 898.994256] ? sg_write.part.0+0x373/0xe20 [ 898.998498] ? __might_fault+0x11f/0x1d0 [ 899.002565] ? lock_downgrade+0x720/0x720 [ 899.006728] ? lock_acquire+0x170/0x3c0 [ 899.010701] ? __might_fault+0xef/0x1d0 [ 899.014679] sg_write.part.0+0xa57/0xe20 [ 899.018747] ? sg_new_write.isra.0+0xa10/0xa10 [ 899.023329] ? __might_fault+0x11f/0x1d0 [ 899.027398] ? dump_mm+0x29c/0xca0 [ 899.030944] ? common_file_perm+0x4e5/0x850 [ 899.035286] ? apparmor_getprocattr+0x11e0/0x11e0 [ 899.036840] xt_l2tp: invalid flags combination: 0 [ 899.040125] ? __might_fault+0x192/0x1d0 [ 899.040143] ? _copy_from_user+0xd2/0x130 [ 899.040160] ? iov_iter_advance+0x210/0xdb0 [ 899.057471] sg_write+0x69/0xa0 [ 899.060757] do_iter_write+0x461/0x5d0 [ 899.064653] vfs_writev+0x153/0x2e0 [ 899.068274] ? vfs_iter_write+0xa0/0xa0 [ 899.072274] ? lock_downgrade+0x720/0x720 [ 899.076416] ? check_preemption_disabled+0x41/0x280 [ 899.081420] ? check_preemption_disabled+0x41/0x280 [ 899.086438] ? do_dup2+0x450/0x450 [ 899.089967] ? check_preemption_disabled+0x41/0x280 [ 899.094972] ? wait_for_completion_io+0x10/0x10 [ 899.099634] do_writev+0x136/0x330 [ 899.103166] ? vfs_writev+0x2e0/0x2e0 [ 899.106957] ? trace_hardirqs_off_caller+0x6e/0x210 [ 899.111960] ? do_syscall_64+0x21/0x620 [ 899.115925] do_syscall_64+0xf9/0x620 [ 899.119718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 899.124891] RIP: 0033:0x7f2c146150c9 [ 899.128594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 899.147477] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 899.155170] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000001fdc0067200000000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff10044800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 62) 04:33:11 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000c091df9b7f000000000000", 0x200000e4}], 0x2) [ 899.162425] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 899.169677] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 899.176932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.184183] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000000200000000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x400, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:11 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000c0b1df9b7f000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b084800ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000020067200000000000000000", 0x200000e4}], 0x2) [ 899.320208] FAULT_INJECTION: forcing a failure. [ 899.320208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 899.401667] CPU: 1 PID: 5180 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 899.409502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 899.418863] Call Trace: [ 899.421469] dump_stack+0x1fc/0x2ef [ 899.425116] should_fail.cold+0xa/0xf [ 899.428933] ? setup_fault_attr+0x200/0x200 [ 899.433270] __alloc_pages_nodemask+0x239/0x2890 [ 899.438029] ? sg_write.part.0+0xa57/0xe20 [ 899.442264] ? sg_write+0x69/0xa0 [ 899.445730] ? do_iter_write+0x461/0x5d0 [ 899.449791] ? vfs_writev+0x153/0x2e0 [ 899.453595] ? do_writev+0x136/0x330 [ 899.457311] ? do_syscall_64+0xf9/0x620 [ 899.461277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 899.466650] ? mark_held_locks+0xf0/0xf0 [ 899.470710] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 899.475543] ? lock_acquire+0x170/0x3c0 [ 899.479513] ? setup_fault_attr+0x200/0x200 [ 899.483833] ? check_preemption_disabled+0x41/0x280 [ 899.488860] alloc_pages_current+0x193/0x2a0 [ 899.493263] sg_build_indirect+0x3de/0xa40 [ 899.497501] sg_common_write.constprop.0+0xb6a/0x20b0 [ 899.502710] ? sg_remove_request.isra.0+0x250/0x250 [ 899.507739] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 899.512491] ? __do_page_fault+0x180/0xd60 [ 899.516733] ? retint_kernel+0x2d/0x2d [ 899.520624] sg_new_write.isra.0+0x6f4/0xa10 [ 899.525034] ? sg_rq_end_io_usercontext+0x90/0x90 [ 899.529876] ? sg_remove_request.isra.0+0x250/0x250 [ 899.534888] ? sg_write.part.0+0x373/0xe20 [ 899.539118] ? __might_fault+0x11f/0x1d0 [ 899.543176] ? lock_downgrade+0x720/0x720 [ 899.547312] ? lock_acquire+0x170/0x3c0 [ 899.551271] ? __might_fault+0xef/0x1d0 [ 899.555242] sg_write.part.0+0xa57/0xe20 [ 899.559295] ? sg_new_write.isra.0+0xa10/0xa10 [ 899.563861] ? __might_fault+0x11f/0x1d0 [ 899.567912] ? dump_mm+0x29c/0xca0 [ 899.571452] ? common_file_perm+0x4e5/0x850 [ 899.575765] ? apparmor_getprocattr+0x11e0/0x11e0 [ 899.580590] ? __might_fault+0x192/0x1d0 [ 899.584660] ? _copy_from_user+0xd2/0x130 [ 899.588798] ? iov_iter_advance+0x210/0xdb0 [ 899.593106] sg_write+0x69/0xa0 [ 899.596378] do_iter_write+0x461/0x5d0 [ 899.600258] vfs_writev+0x153/0x2e0 [ 899.603873] ? vfs_iter_write+0xa0/0xa0 [ 899.607838] ? lock_downgrade+0x720/0x720 [ 899.611978] ? check_preemption_disabled+0x41/0x280 [ 899.616981] ? check_preemption_disabled+0x41/0x280 [ 899.621991] ? do_dup2+0x450/0x450 [ 899.625517] ? check_preemption_disabled+0x41/0x280 [ 899.630523] ? wait_for_completion_io+0x10/0x10 [ 899.635181] do_writev+0x136/0x330 [ 899.638708] ? vfs_writev+0x2e0/0x2e0 [ 899.642497] ? trace_hardirqs_off_caller+0x6e/0x210 [ 899.647501] ? do_syscall_64+0x21/0x620 [ 899.651466] do_syscall_64+0xf9/0x620 [ 899.655262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 899.660435] RIP: 0033:0x7f2c146150c9 [ 899.664133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 899.683018] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 899.690711] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000030067200000000000000000", 0x200000e4}], 0x2) [ 899.697964] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 899.705216] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 899.712477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.719730] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:11 executing program 5: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sync() sync() sync() sync() socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/15, 0x0) sync() sync() syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001a80)={{r2}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x14}) sync() fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sync() r3 = creat(0x0, 0x309bbe80f327b664) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636563733d9d5465722c63616368653d667363616368652c63616368653d6d6d61702c6163636573733d616e792c6e6f657874656a642c6163636573733d636c69656e742c76657273696f6e3d3970fcffffffffffffff69643e", @ANYRESDEC=0x0, @ANYBLOB=',euid', @ANYRESDEC=0x0, @ANYBLOB=',audit,hash,audit,obj_role=/dev/vcsa\x00,rootcontext=root,\x00']) 04:33:11 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000ffefffffff7f000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 63) 04:33:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b04480089ffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x400, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000140)) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x400, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044802ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000040067200000000000000000", 0x200000e4}], 0x2) 04:33:12 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000267200000000000000000", 0x200000e4}], 0x2) [ 899.903057] FAULT_INJECTION: forcing a failure. [ 899.903057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:33:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000050067200000000000000000", 0x200000e4}], 0x2) 04:33:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x400, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000140)) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x400, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) [ 900.026467] CPU: 0 PID: 5226 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 900.034301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 900.043668] Call Trace: [ 900.046281] dump_stack+0x1fc/0x2ef [ 900.049930] should_fail.cold+0xa/0xf [ 900.053748] ? setup_fault_attr+0x200/0x200 [ 900.058100] __alloc_pages_nodemask+0x239/0x2890 [ 900.062868] ? sg_write.part.0+0xa57/0xe20 [ 900.067190] ? sg_write+0x69/0xa0 [ 900.070650] ? do_iter_write+0x461/0x5d0 [ 900.074719] ? vfs_writev+0x153/0x2e0 [ 900.078526] ? do_writev+0x136/0x330 [ 900.082241] ? do_syscall_64+0xf9/0x620 [ 900.086224] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.091595] ? mark_held_locks+0xf0/0xf0 [ 900.095680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 900.100530] ? lock_acquire+0x170/0x3c0 [ 900.104518] ? setup_fault_attr+0x200/0x200 [ 900.108853] ? check_preemption_disabled+0x41/0x280 [ 900.113882] alloc_pages_current+0x193/0x2a0 [ 900.118302] sg_build_indirect+0x3de/0xa40 [ 900.122556] sg_common_write.constprop.0+0xb6a/0x20b0 [ 900.127756] ? sg_remove_request.isra.0+0x250/0x250 [ 900.132779] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 900.137548] ? __do_page_fault+0x180/0xd60 [ 900.141787] ? retint_kernel+0x2d/0x2d [ 900.145693] sg_new_write.isra.0+0x6f4/0xa10 [ 900.150119] ? sg_rq_end_io_usercontext+0x90/0x90 [ 900.154976] ? sg_remove_request.isra.0+0x250/0x250 [ 900.159995] ? sg_write.part.0+0x373/0xe20 [ 900.164242] ? __might_fault+0x11f/0x1d0 [ 900.168315] ? lock_downgrade+0x720/0x720 [ 900.172471] ? lock_acquire+0x170/0x3c0 [ 900.176457] ? __might_fault+0xef/0x1d0 [ 900.180443] sg_write.part.0+0xa57/0xe20 [ 900.184520] ? sg_new_write.isra.0+0xa10/0xa10 [ 900.189112] ? __might_fault+0x11f/0x1d0 [ 900.193187] ? dump_mm+0x29c/0xca0 [ 900.196744] ? common_file_perm+0x4e5/0x850 [ 900.201077] ? apparmor_getprocattr+0x11e0/0x11e0 [ 900.205925] ? __might_fault+0x192/0x1d0 [ 900.209993] ? _copy_from_user+0xd2/0x130 [ 900.214146] ? iov_iter_advance+0x210/0xdb0 [ 900.218476] sg_write+0x69/0xa0 [ 900.221769] do_iter_write+0x461/0x5d0 [ 900.225674] vfs_writev+0x153/0x2e0 [ 900.229307] ? vfs_iter_write+0xa0/0xa0 [ 900.233283] ? lock_downgrade+0x720/0x720 [ 900.237440] ? check_preemption_disabled+0x41/0x280 [ 900.242475] ? check_preemption_disabled+0x41/0x280 [ 900.247507] ? do_dup2+0x450/0x450 [ 900.251051] ? check_preemption_disabled+0x41/0x280 [ 900.256193] ? wait_for_completion_io+0x10/0x10 [ 900.260878] do_writev+0x136/0x330 [ 900.264431] ? vfs_writev+0x2e0/0x2e0 [ 900.268246] ? trace_hardirqs_off_caller+0x6e/0x210 [ 900.273270] ? do_syscall_64+0x21/0x620 04:33:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044803ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 900.277254] do_syscall_64+0xf9/0x620 [ 900.281066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.286259] RIP: 0033:0x7f2c146150c9 [ 900.289975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 900.308876] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 900.316590] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000080067200000000000000000", 0x200000e4}], 0x2) [ 900.323857] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 900.331105] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.338377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.345632] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 64) 04:33:12 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000367200000000000000000", 0x200000e4}], 0x2) 04:33:12 executing program 5: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) sync() (async) sync() (async) sync() sync() (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/15, 0x0) (async) sync() sync() (async) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d307830306f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811ae03ad028c146e3c152d761a0fa450dfda0f231b785140138d0f49cd3f478d9745be8b44bcfd93a1c21b1dc042dc119f8b0f7cdb1f2621887310cd87a588de856bb6a1978e79b1e1a7358a0585331e09c646e19a3c7fc15a903c4ff7c1f87c63e23a50a50e459a5436ab780a8870fb62b2fa8d9e955487b13b98ed89142c2f01e6114ca82b3fa5506746beead9d423696de8a59789d188839c2da0a19a0c9fd1154a75822eb88b11e0172436ef2364f0cf7509cc90196ae818153867f4ee66e6f36a465b8feccae38dc11386ac18e05d99d84aaab9952c42733030bc82"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001a80)={{r2}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x14}) (async) sync() (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async) sync() (async) r3 = creat(0x0, 0x309bbe80f327b664) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636563733d9d5465722c63616368653d667363616368652c63616368653d6d6d61702c6163636573733d616e792c6e6f657874656a642c6163636573733d636c69656e742c76657273696f6e3d3970fcffffffffffffff69643e", @ANYRESDEC=0x0, @ANYBLOB=',euid', @ANYRESDEC=0x0, @ANYBLOB=',audit,hash,audit,obj_role=/dev/vcsa\x00,rootcontext=root,\x00']) 04:33:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000090067200000000000000000", 0x200000e4}], 0x2) 04:33:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) io_pgetevents(0x0, 0xffe9, 0x9, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080), &(0x7f0000000180)={&(0x7f0000000140)={[0x8827]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044804ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 900.521702] FAULT_INJECTION: forcing a failure. [ 900.521702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:33:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000d0067200000000000000000", 0x200000e4}], 0x2) 04:33:12 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000467200000000000000000", 0x200000e4}], 0x2) [ 900.581923] CPU: 1 PID: 5272 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 900.589752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 900.599109] Call Trace: [ 900.601716] dump_stack+0x1fc/0x2ef [ 900.605374] should_fail.cold+0xa/0xf [ 900.609199] ? setup_fault_attr+0x200/0x200 [ 900.613534] __alloc_pages_nodemask+0x239/0x2890 [ 900.618290] ? sg_write.part.0+0xa57/0xe20 [ 900.622526] ? sg_write+0x69/0xa0 [ 900.625990] ? do_iter_write+0x461/0x5d0 [ 900.630055] ? vfs_writev+0x153/0x2e0 [ 900.633862] ? do_writev+0x136/0x330 [ 900.637590] ? do_syscall_64+0xf9/0x620 [ 900.641580] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.646949] ? mark_held_locks+0xf0/0xf0 [ 900.651023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 900.655878] ? lock_acquire+0x170/0x3c0 [ 900.659893] ? setup_fault_attr+0x200/0x200 [ 900.664225] ? check_preemption_disabled+0x41/0x280 [ 900.669261] alloc_pages_current+0x193/0x2a0 [ 900.673677] sg_build_indirect+0x3de/0xa40 [ 900.677930] sg_common_write.constprop.0+0xb6a/0x20b0 [ 900.683135] ? sg_remove_request.isra.0+0x250/0x250 [ 900.688161] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 900.692925] ? __do_page_fault+0x180/0xd60 [ 900.697201] ? retint_kernel+0x2d/0x2d [ 900.701105] sg_new_write.isra.0+0x6f4/0xa10 [ 900.705521] ? sg_rq_end_io_usercontext+0x90/0x90 [ 900.710377] ? sg_remove_request.isra.0+0x250/0x250 [ 900.715392] ? sg_write.part.0+0x373/0xe20 [ 900.719638] ? __might_fault+0x11f/0x1d0 [ 900.723708] ? lock_downgrade+0x720/0x720 [ 900.727856] ? lock_acquire+0x170/0x3c0 [ 900.731830] ? __might_fault+0xef/0x1d0 [ 900.735816] sg_write.part.0+0xa57/0xe20 [ 900.739884] ? sg_new_write.isra.0+0xa10/0xa10 [ 900.744471] ? __might_fault+0x11f/0x1d0 [ 900.748541] ? dump_mm+0x29c/0xca0 [ 900.752096] ? common_file_perm+0x4e5/0x850 [ 900.756428] ? apparmor_getprocattr+0x11e0/0x11e0 [ 900.761289] ? __might_fault+0x192/0x1d0 [ 900.765360] ? _copy_from_user+0xd2/0x130 [ 900.769513] ? iov_iter_advance+0x210/0xdb0 [ 900.773838] sg_write+0x69/0xa0 [ 900.777130] do_iter_write+0x461/0x5d0 [ 900.781027] vfs_writev+0x153/0x2e0 [ 900.784660] ? vfs_iter_write+0xa0/0xa0 [ 900.788644] ? lock_downgrade+0x720/0x720 [ 900.792805] ? check_preemption_disabled+0x41/0x280 [ 900.797833] ? check_preemption_disabled+0x41/0x280 [ 900.802868] ? do_dup2+0x450/0x450 [ 900.806419] ? check_preemption_disabled+0x41/0x280 [ 900.811533] ? wait_for_completion_io+0x10/0x10 [ 900.816218] do_writev+0x136/0x330 [ 900.819764] ? vfs_writev+0x2e0/0x2e0 [ 900.823580] ? trace_hardirqs_off_caller+0x6e/0x210 [ 900.828604] ? do_syscall_64+0x21/0x620 04:33:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000480067200000000000000000", 0x200000e4}], 0x2) [ 900.832609] do_syscall_64+0xf9/0x620 [ 900.836416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.841604] RIP: 0033:0x7f2c146150c9 [ 900.845321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 900.864222] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 900.871932] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044805ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) io_pgetevents(0x0, 0xffe9, 0x9, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080), &(0x7f0000000180)={&(0x7f0000000140)={[0x8827]}, 0x8}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 900.879199] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 900.886470] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.893737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.901008] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000567200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 65) 04:33:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000680067200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 5: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) sync() (async) sync() (async) sync() sync() (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/15, 0x0) (async) sync() (async) sync() syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d307830306f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811ae03ad028c146e3c152d761a0fa450dfda0f231b785140138d0f49cd3f478d9745be8b44bcfd93a1c21b1dc042dc119f8b0f7cdb1f2621887310cd87a588de856bb6a1978e79b1e1a7358a0585331e09c646e19a3c7fc15a903c4ff7c1f87c63e23a50a50e459a5436ab780a8870fb62b2fa8d9e955487b13b98ed89142c2f01e6114ca82b3fa5506746beead9d423696de8a59789d188839c2da0a19a0c9fd1154a75822eb88b11e0172436ef2364f0cf7509cc90196ae818153867f4ee66e6f36a465b8feccae38dc11386ac18e05d99d84aaab9952c42733030bc82"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001a80)={{r2}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x14}) sync() (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sync() (async) r3 = creat(0x0, 0x309bbe80f327b664) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636563733d9d5465722c63616368653d667363616368652c63616368653d6d6d61702c6163636573733d616e792c6e6f657874656a642c6163636573733d636c69656e742c76657273696f6e3d3970fcffffffffffffff69643e", @ANYRESDEC=0x0, @ANYBLOB=',euid', @ANYRESDEC=0x0, @ANYBLOB=',audit,hash,audit,obj_role=/dev/vcsa\x00,rootcontext=root,\x00']) 04:33:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044807ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000767200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) io_pgetevents(0x0, 0xffe9, 0x9, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080), &(0x7f0000000180)={&(0x7f0000000140)={[0x8827]}, 0x8}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000690067200000000000000000", 0x200000e4}], 0x2) [ 901.092520] FAULT_INJECTION: forcing a failure. [ 901.092520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 901.144845] CPU: 1 PID: 5313 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 901.152712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 901.162073] Call Trace: [ 901.164678] dump_stack+0x1fc/0x2ef [ 901.168330] should_fail.cold+0xa/0xf [ 901.172145] ? setup_fault_attr+0x200/0x200 [ 901.176491] __alloc_pages_nodemask+0x239/0x2890 [ 901.181266] ? sg_write.part.0+0xa57/0xe20 [ 901.185507] ? sg_write+0x69/0xa0 [ 901.188964] ? do_iter_write+0x461/0x5d0 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000867200000000000000000", 0x200000e4}], 0x2) [ 901.193034] ? vfs_writev+0x153/0x2e0 [ 901.196838] ? do_writev+0x136/0x330 [ 901.200558] ? do_syscall_64+0xf9/0x620 [ 901.204545] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 901.209923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 901.214769] ? ___preempt_schedule+0x16/0x18 [ 901.219190] ? preempt_schedule_common+0x45/0xc0 [ 901.223958] ? setup_fault_attr+0x200/0x200 [ 901.228293] ? check_preemption_disabled+0x41/0x280 [ 901.233419] alloc_pages_current+0x193/0x2a0 [ 901.237921] sg_build_indirect+0x3de/0xa40 04:33:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000367200000000000000000", 0x200000e4}], 0x2) [ 901.242174] sg_common_write.constprop.0+0xb6a/0x20b0 [ 901.247377] ? sg_remove_request.isra.0+0x250/0x250 [ 901.252404] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 901.257175] ? __do_page_fault+0x180/0xd60 [ 901.261415] ? retint_kernel+0x2d/0x2d [ 901.265318] sg_new_write.isra.0+0x6f4/0xa10 [ 901.269735] ? sg_rq_end_io_usercontext+0x90/0x90 [ 901.274597] ? sg_remove_request.isra.0+0x250/0x250 [ 901.279613] ? sg_write.part.0+0x373/0xe20 [ 901.283858] ? __might_fault+0x11f/0x1d0 [ 901.287930] ? lock_downgrade+0x720/0x720 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000967200000000000000000", 0x200000e4}], 0x2) [ 901.292079] ? lock_acquire+0x170/0x3c0 [ 901.296058] ? __might_fault+0xef/0x1d0 [ 901.300048] sg_write.part.0+0xa57/0xe20 [ 901.304123] ? sg_new_write.isra.0+0xa10/0xa10 [ 901.308716] ? __might_fault+0x11f/0x1d0 [ 901.312791] ? dump_mm+0x29c/0xca0 [ 901.316349] ? common_file_perm+0x4e5/0x850 [ 901.320684] ? apparmor_getprocattr+0x11e0/0x11e0 [ 901.325534] ? __might_fault+0x192/0x1d0 [ 901.329601] ? _copy_from_user+0xd2/0x130 [ 901.333754] ? iov_iter_advance+0x210/0xdb0 [ 901.338082] sg_write+0x69/0xa0 [ 901.341368] do_iter_write+0x461/0x5d0 04:33:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000567200000000000000000", 0x200000e4}], 0x2) [ 901.345271] vfs_writev+0x153/0x2e0 [ 901.348902] ? vfs_iter_write+0xa0/0xa0 [ 901.352880] ? lock_downgrade+0x720/0x720 [ 901.357040] ? check_preemption_disabled+0x41/0x280 [ 901.362066] ? check_preemption_disabled+0x41/0x280 [ 901.367370] ? do_dup2+0x450/0x450 [ 901.370926] ? check_preemption_disabled+0x41/0x280 [ 901.375947] ? wait_for_completion_io+0x10/0x10 [ 901.380625] do_writev+0x136/0x330 [ 901.384168] ? vfs_writev+0x2e0/0x2e0 [ 901.387973] ? trace_hardirqs_off_caller+0x6e/0x210 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000d67200000000000000000", 0x200000e4}], 0x2) [ 901.392992] ? do_syscall_64+0x21/0x620 [ 901.396985] do_syscall_64+0xf9/0x620 [ 901.400795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 901.405985] RIP: 0033:0x7f2c146150c9 [ 901.409703] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 901.428600] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 901.436313] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 66) 04:33:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000967200000000000000000", 0x200000e4}], 0x2) [ 901.443581] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 901.450849] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 901.458118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.465386] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:13 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000ffefffffff7f000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044808ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win9\b\x00utf8=0,shortname=mixed,shortname=winnt,utf8=0,utf8=1,uni_xlate=1,usefree,codepage=737,nonumtuni_xlate=1,\x00\x00\x00\x00\x00\x00\x00'], 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000002967200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000002a67200000000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000ffefffffff7f000000000000", 0x200000e4}], 0x2) 04:33:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000d67200000000000000000", 0x200000e4}], 0x2) [ 901.582030] FAULT_INJECTION: forcing a failure. [ 901.582030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 901.612424] FAT-fs (loop4): Unrecognized mount option "shortname=win9" or missing value [ 901.643340] CPU: 0 PID: 5365 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 901.651157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 901.660513] Call Trace: [ 901.663117] dump_stack+0x1fc/0x2ef [ 901.666761] should_fail.cold+0xa/0xf [ 901.670578] ? setup_fault_attr+0x200/0x200 [ 901.674919] __alloc_pages_nodemask+0x239/0x2890 [ 901.679683] ? sg_write.part.0+0xa57/0xe20 [ 901.683926] ? sg_write+0x69/0xa0 [ 901.687385] ? do_iter_write+0x461/0x5d0 [ 901.691451] ? vfs_writev+0x153/0x2e0 [ 901.695262] ? do_writev+0x136/0x330 [ 901.698991] ? do_syscall_64+0xf9/0x620 [ 901.702984] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 901.708363] ? mark_held_locks+0xf0/0xf0 [ 901.712446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 901.717299] ? lock_acquire+0x170/0x3c0 [ 901.721288] ? setup_fault_attr+0x200/0x200 [ 901.725625] ? check_preemption_disabled+0x41/0x280 [ 901.730646] alloc_pages_current+0x193/0x2a0 [ 901.735039] sg_build_indirect+0x3de/0xa40 [ 901.739287] sg_common_write.constprop.0+0xb6a/0x20b0 [ 901.744492] ? sg_remove_request.isra.0+0x250/0x250 [ 901.749505] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 901.754253] ? __do_page_fault+0x180/0xd60 [ 901.758478] ? retint_kernel+0x2d/0x2d [ 901.762359] sg_new_write.isra.0+0x6f4/0xa10 [ 901.766758] ? sg_rq_end_io_usercontext+0x90/0x90 [ 901.771595] ? sg_remove_request.isra.0+0x250/0x250 [ 901.776595] ? sg_write.part.0+0x373/0xe20 [ 901.780820] ? __might_fault+0x11f/0x1d0 [ 901.784872] ? lock_downgrade+0x720/0x720 [ 901.789006] ? lock_acquire+0x170/0x3c0 [ 901.792972] ? __might_fault+0xef/0x1d0 [ 901.796936] sg_write.part.0+0xa57/0xe20 [ 901.800990] ? sg_new_write.isra.0+0xa10/0xa10 [ 901.805557] ? __might_fault+0x11f/0x1d0 [ 901.809608] ? dump_mm+0x29c/0xca0 [ 901.813158] ? common_file_perm+0x4e5/0x850 [ 901.817470] ? apparmor_getprocattr+0x11e0/0x11e0 [ 901.822300] ? __might_fault+0x192/0x1d0 [ 901.826352] ? _copy_from_user+0xd2/0x130 [ 901.830504] ? iov_iter_advance+0x210/0xdb0 [ 901.834813] sg_write+0x69/0xa0 [ 901.838086] do_iter_write+0x461/0x5d0 [ 901.841971] vfs_writev+0x153/0x2e0 [ 901.845588] ? vfs_iter_write+0xa0/0xa0 [ 901.849550] ? lock_downgrade+0x720/0x720 [ 901.853688] ? check_preemption_disabled+0x41/0x280 [ 901.858691] ? check_preemption_disabled+0x41/0x280 [ 901.863702] ? do_dup2+0x450/0x450 [ 901.867230] ? check_preemption_disabled+0x41/0x280 [ 901.872238] ? wait_for_completion_io+0x10/0x10 [ 901.876902] do_writev+0x136/0x330 [ 901.880431] ? vfs_writev+0x2e0/0x2e0 [ 901.884223] ? trace_hardirqs_off_caller+0x6e/0x210 [ 901.889233] ? do_syscall_64+0x21/0x620 [ 901.893197] do_syscall_64+0xf9/0x620 [ 901.896992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 901.902187] RIP: 0033:0x7f2c146150c9 [ 901.905887] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 901.924768] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 901.932473] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044809ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000004867200000000000000000", 0x200000e4}], 0x2) [ 901.939726] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 901.946979] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 901.954232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.961486] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win9\b\x00utf8=0,shortname=mixed,shortname=winnt,utf8=0,utf8=1,uni_xlate=1,usefree,codepage=737,nonumtuni_xlate=1,\x00\x00\x00\x00\x00\x00\x00'], 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 67) 04:33:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000dc1f67200000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000ffefffffff7f000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b04480dffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067030000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000002067200000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xca) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)=0x1) 04:33:14 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067050000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044888ffffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 902.127037] FAULT_INJECTION: forcing a failure. [ 902.127037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 902.152990] FAT-fs (loop4): Unrecognized mount option "shortname=win9" or missing value 04:33:14 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xca) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) (async, rerun: 64) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)=0x1) (rerun: 64) 04:33:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b04480089ffff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 902.199496] CPU: 1 PID: 5399 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 902.207329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 902.216688] Call Trace: [ 902.219291] dump_stack+0x1fc/0x2ef [ 902.222933] should_fail.cold+0xa/0xf [ 902.226751] ? setup_fault_attr+0x200/0x200 [ 902.231093] __alloc_pages_nodemask+0x239/0x2890 [ 902.235860] ? sg_write.part.0+0xa57/0xe20 [ 902.240099] ? sg_write+0x69/0xa0 [ 902.243568] ? do_iter_write+0x461/0x5d0 [ 902.247631] ? vfs_writev+0x153/0x2e0 [ 902.251432] ? do_writev+0x136/0x330 [ 902.255153] ? do_syscall_64+0xf9/0x620 [ 902.259135] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.264513] ? mark_held_locks+0xf0/0xf0 [ 902.268594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 902.273451] ? lock_acquire+0x170/0x3c0 [ 902.277441] ? setup_fault_attr+0x200/0x200 [ 902.281777] ? check_preemption_disabled+0x41/0x280 [ 902.286801] alloc_pages_current+0x193/0x2a0 [ 902.291200] sg_build_indirect+0x3de/0xa40 [ 902.295434] sg_common_write.constprop.0+0xb6a/0x20b0 [ 902.300622] ? sg_remove_request.isra.0+0x250/0x250 [ 902.305629] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.310371] ? __do_page_fault+0x180/0xd60 [ 902.314591] ? retint_kernel+0x2d/0x2d [ 902.318468] sg_new_write.isra.0+0x6f4/0xa10 [ 902.322873] ? sg_rq_end_io_usercontext+0x90/0x90 [ 902.327699] ? sg_remove_request.isra.0+0x250/0x250 [ 902.332691] ? sg_write.part.0+0x373/0xe20 [ 902.336908] ? __might_fault+0x11f/0x1d0 [ 902.340950] ? lock_downgrade+0x720/0x720 [ 902.345090] ? lock_acquire+0x170/0x3c0 [ 902.349057] ? __might_fault+0xef/0x1d0 [ 902.353015] sg_write.part.0+0xa57/0xe20 [ 902.357059] ? sg_new_write.isra.0+0xa10/0xa10 [ 902.361625] ? __might_fault+0x11f/0x1d0 [ 902.365669] ? dump_mm+0x29c/0xca0 [ 902.369205] ? common_file_perm+0x4e5/0x850 [ 902.373531] ? apparmor_getprocattr+0x11e0/0x11e0 [ 902.378459] ? __might_fault+0x192/0x1d0 [ 902.382508] ? _copy_from_user+0xd2/0x130 [ 902.386652] ? iov_iter_advance+0x210/0xdb0 [ 902.390960] sg_write+0x69/0xa0 [ 902.394225] do_iter_write+0x461/0x5d0 [ 902.398094] vfs_writev+0x153/0x2e0 [ 902.401698] ? vfs_iter_write+0xa0/0xa0 [ 902.405661] ? lock_downgrade+0x720/0x720 [ 902.409804] ? check_preemption_disabled+0x41/0x280 [ 902.414817] ? check_preemption_disabled+0x41/0x280 [ 902.419826] ? do_dup2+0x450/0x450 [ 902.423354] ? check_preemption_disabled+0x41/0x280 [ 902.428386] ? wait_for_completion_io+0x10/0x10 [ 902.433071] do_writev+0x136/0x330 [ 902.436621] ? vfs_writev+0x2e0/0x2e0 [ 902.440412] ? trace_hardirqs_off_caller+0x6e/0x210 [ 902.445416] ? do_syscall_64+0x21/0x620 [ 902.449379] do_syscall_64+0xf9/0x620 [ 902.453170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.458342] RIP: 0033:0x7f2c146150c9 [ 902.462039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 902.480926] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 902.488621] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 902.495872] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 902.503122] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.510379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.517632] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win9\b\x00utf8=0,shortname=mixed,shortname=winnt,utf8=0,utf8=1,uni_xlate=1,usefree,codepage=737,nonumtuni_xlate=1,\x00\x00\x00\x00\x00\x00\x00'], 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000004867200000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067070000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xca) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1d) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xca) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)=0x1) (async) 04:33:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 68) 04:33:14 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067090000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000006867200000000000000000", 0x200000e4}], 0x2) 04:33:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ff89ff0f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 902.613611] FAULT_INJECTION: forcing a failure. [ 902.613611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:33:14 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x8, 0x1f, 0x5, 0x0, 0x7, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x60, 0x8000000000000001}, 0x92c4, 0xffffffffffffffe0, 0x6, 0x2, 0x0, 0xfff, 0x1000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x100000006, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='ext4_collapse_range\x00') [ 902.663493] CPU: 1 PID: 5428 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 902.671320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 902.680679] Call Trace: [ 902.683284] dump_stack+0x1fc/0x2ef [ 902.686926] should_fail.cold+0xa/0xf [ 902.690743] ? setup_fault_attr+0x200/0x200 [ 902.690998] FAT-fs (loop4): Unrecognized mount option "shortname=win9" or missing value [ 902.695070] __alloc_pages_nodemask+0x239/0x2890 [ 902.695085] ? sg_write.part.0+0xa57/0xe20 [ 902.695096] ? sg_write+0x69/0xa0 [ 902.695110] ? do_iter_write+0x461/0x5d0 [ 902.695121] ? vfs_writev+0x153/0x2e0 [ 902.695133] ? do_writev+0x136/0x330 [ 902.695149] ? do_syscall_64+0xf9/0x620 [ 902.731391] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.736749] ? mark_held_locks+0xf0/0xf0 [ 902.740807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 902.745637] ? lock_acquire+0x170/0x3c0 [ 902.749603] ? setup_fault_attr+0x200/0x200 [ 902.753919] ? check_preemption_disabled+0x41/0x280 [ 902.758949] alloc_pages_current+0x193/0x2a0 [ 902.763350] sg_build_indirect+0x3de/0xa40 [ 902.767579] sg_common_write.constprop.0+0xb6a/0x20b0 [ 902.772773] ? sg_remove_request.isra.0+0x250/0x250 [ 902.777776] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.782523] ? __do_page_fault+0x180/0xd60 [ 902.786747] ? retint_kernel+0x2d/0x2d [ 902.790628] sg_new_write.isra.0+0x6f4/0xa10 [ 902.795033] ? sg_rq_end_io_usercontext+0x90/0x90 [ 902.799872] ? sg_remove_request.isra.0+0x250/0x250 [ 902.804880] ? sg_write.part.0+0x373/0xe20 [ 902.809107] ? __might_fault+0x11f/0x1d0 [ 902.813158] ? lock_downgrade+0x720/0x720 [ 902.817293] ? lock_acquire+0x170/0x3c0 [ 902.821251] ? __might_fault+0xef/0x1d0 [ 902.825216] sg_write.part.0+0xa57/0xe20 [ 902.829270] ? sg_new_write.isra.0+0xa10/0xa10 [ 902.833836] ? __might_fault+0x11f/0x1d0 [ 902.837890] ? dump_mm+0x29c/0xca0 [ 902.841427] ? common_file_perm+0x4e5/0x850 [ 902.845737] ? apparmor_getprocattr+0x11e0/0x11e0 [ 902.850564] ? __might_fault+0x192/0x1d0 [ 902.854617] ? _copy_from_user+0xd2/0x130 [ 902.858753] ? iov_iter_advance+0x210/0xdb0 [ 902.863073] sg_write+0x69/0xa0 [ 902.866341] do_iter_write+0x461/0x5d0 [ 902.870225] vfs_writev+0x153/0x2e0 [ 902.873837] ? vfs_iter_write+0xa0/0xa0 [ 902.877800] ? lock_downgrade+0x720/0x720 [ 902.881946] ? check_preemption_disabled+0x41/0x280 [ 902.886960] ? check_preemption_disabled+0x41/0x280 [ 902.891974] ? do_dup2+0x450/0x450 [ 902.895504] ? check_preemption_disabled+0x41/0x280 [ 902.900519] ? wait_for_completion_io+0x10/0x10 [ 902.905180] do_writev+0x136/0x330 [ 902.908710] ? vfs_writev+0x2e0/0x2e0 [ 902.912514] ? trace_hardirqs_off_caller+0x6e/0x210 [ 902.917519] ? do_syscall_64+0x21/0x620 [ 902.921483] do_syscall_64+0xf9/0x620 [ 902.925283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.930457] RIP: 0033:0x7f2c146150c9 [ 902.934160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 902.953047] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 04:33:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000670a0000000000000000", 0x200000e4}], 0x2) [ 902.960744] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 902.967998] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 902.975249] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.982500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.989752] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000006967200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) 04:33:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffff890f4002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067230000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000001fdc67200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0202002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 69) 04:33:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000000210000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067480000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) (async) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x8, 0x1f, 0x5, 0x0, 0x7, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x60, 0x8000000000000001}, 0x92c4, 0xffffffffffffffe0, 0x6, 0x2, 0x0, 0xfff, 0x1000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x100000006, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='ext4_collapse_range\x00') 04:33:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0302002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0402002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000007c14297f000000000000", 0x200000e4}], 0x2) [ 903.321000] FAULT_INJECTION: forcing a failure. [ 903.321000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 903.377307] CPU: 0 PID: 5489 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 903.385132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 903.394487] Call Trace: [ 903.397129] dump_stack+0x1fc/0x2ef [ 903.400791] should_fail.cold+0xa/0xf [ 903.404603] ? setup_fault_attr+0x200/0x200 [ 903.408944] __alloc_pages_nodemask+0x239/0x2890 [ 903.413714] ? finish_task_switch+0x1db/0x760 [ 903.418228] ? switch_mm_irqs_off+0x764/0x1340 [ 903.422854] ? __schedule+0x88f/0x2040 [ 903.426753] ? mark_held_locks+0xf0/0xf0 [ 903.430826] ? mark_held_locks+0xa6/0xf0 [ 903.434894] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 903.439667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 903.444514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 903.449286] ? retint_kernel+0x2d/0x2d [ 903.453282] ? __alloc_pages_nodemask+0x1c/0x2890 [ 903.458135] alloc_pages_current+0x193/0x2a0 [ 903.462553] sg_build_indirect+0x3de/0xa40 [ 903.466787] sg_common_write.constprop.0+0xb6a/0x20b0 [ 903.471965] ? sg_remove_request.isra.0+0x250/0x250 [ 903.476968] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 903.481709] ? __do_page_fault+0x180/0xd60 [ 903.485928] ? retint_kernel+0x2d/0x2d [ 903.489810] sg_new_write.isra.0+0x6f4/0xa10 [ 903.494214] ? sg_rq_end_io_usercontext+0x90/0x90 [ 903.499067] ? sg_remove_request.isra.0+0x250/0x250 [ 903.504064] ? sg_write.part.0+0x373/0xe20 [ 903.508282] ? __might_fault+0x11f/0x1d0 [ 903.512325] ? lock_downgrade+0x720/0x720 [ 903.516453] ? lock_acquire+0x170/0x3c0 [ 903.520420] ? __might_fault+0xef/0x1d0 [ 903.524389] sg_write.part.0+0xa57/0xe20 [ 903.528446] ? sg_new_write.isra.0+0xa10/0xa10 [ 903.533019] ? __might_fault+0x11f/0x1d0 [ 903.537072] ? dump_mm+0x29c/0xca0 [ 903.540599] ? common_file_perm+0x4e5/0x850 [ 903.544905] ? apparmor_getprocattr+0x11e0/0x11e0 [ 903.549735] ? __might_fault+0x192/0x1d0 [ 903.553795] ? _copy_from_user+0xd2/0x130 [ 903.557930] ? iov_iter_advance+0x210/0xdb0 [ 903.562247] sg_write+0x69/0xa0 [ 903.565515] do_iter_write+0x461/0x5d0 [ 903.569389] vfs_writev+0x153/0x2e0 [ 903.572997] ? vfs_iter_write+0xa0/0xa0 [ 903.576963] ? lock_downgrade+0x720/0x720 [ 903.581100] ? check_preemption_disabled+0x41/0x280 [ 903.586104] ? check_preemption_disabled+0x41/0x280 [ 903.591117] ? do_dup2+0x450/0x450 [ 903.594641] ? check_preemption_disabled+0x41/0x280 [ 903.599640] ? wait_for_completion_io+0x10/0x10 [ 903.604303] do_writev+0x136/0x330 [ 903.607824] ? vfs_writev+0x2e0/0x2e0 [ 903.611609] ? trace_hardirqs_off_caller+0x6e/0x210 [ 903.616616] ? do_syscall_64+0x21/0x620 [ 903.620574] do_syscall_64+0xf9/0x620 [ 903.624359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 903.629544] RIP: 0033:0x7f2c146150c9 [ 903.633244] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 903.652128] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 903.659817] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 [ 903.667068] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000010fe14297f000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) 04:33:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067000300000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0502002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 903.674317] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.681667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 903.688927] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 04:33:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 70) 04:33:15 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) (async) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) (async) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x8, 0x1f, 0x5, 0x0, 0x7, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x60, 0x8000000000000001}, 0x92c4, 0xffffffffffffffe0, 0x6, 0x2, 0x0, 0xfff, 0x1000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x100000006, 0xffffffffffffffff, 0x8) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='ext4_collapse_range\x00') 04:33:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0602002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000101e15297f000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000002300)=""/56, 0x0, 0x38}, 0x20) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000002380)="4788e548b819cdfeb8000000000f23d80f21f8364e0fc759000f23f8c402fd338302000000123e3664450f01c33cc33c43656766410f3881bee2b95f11c74424002d010000f3460fc73044d8c70f08c744240002000000c744240200000000ff2c412424baf80cb8ba7e6983d67cd07cd0fdb7fc2cfc2c572c577f00c7442400cdbe0000c7442402ba3b0000c7442406000000000f011424", 0x98}], 0x1, 0x40, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000180)=0x5) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@udp6, 0x1}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067206000000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000ffefffffff7f000000000000", 0x200000e4}], 0x2) 04:33:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067206700000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0702002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 903.933345] FAULT_INJECTION: forcing a failure. [ 903.933345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:33:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x11c, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='syz_tun\x00'}, @typed={0xc, 0x2, 0x0, 0x0, @u64}, @generic="50bb2d6f67d2fb3aabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb8100f81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a66f167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x11c}], 0x1}, 0x0) [ 904.012577] CPU: 0 PID: 5553 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 904.020408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 904.029765] Call Trace: [ 904.032460] dump_stack+0x1fc/0x2ef [ 904.036104] should_fail.cold+0xa/0xf [ 904.039914] ? setup_fault_attr+0x200/0x200 [ 904.044252] __alloc_pages_nodemask+0x239/0x2890 [ 904.049020] ? sg_write.part.0+0xa57/0xe20 [ 904.053254] ? sg_write+0x69/0xa0 [ 904.056714] ? do_iter_write+0x461/0x5d0 [ 904.060769] ? vfs_writev+0x153/0x2e0 [ 904.064557] ? do_writev+0x136/0x330 [ 904.068262] ? do_syscall_64+0xf9/0x620 [ 904.072284] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.077725] ? mark_held_locks+0xf0/0xf0 [ 904.081788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 904.086622] ? lock_acquire+0x170/0x3c0 [ 904.090592] ? setup_fault_attr+0x200/0x200 [ 904.094907] ? check_preemption_disabled+0x41/0x280 [ 904.099923] alloc_pages_current+0x193/0x2a0 [ 904.104330] sg_build_indirect+0x3de/0xa40 [ 904.108570] sg_common_write.constprop.0+0xb6a/0x20b0 [ 904.113754] ? sg_remove_request.isra.0+0x250/0x250 [ 904.119121] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 904.123958] ? __do_page_fault+0x180/0xd60 [ 904.128195] ? retint_kernel+0x2d/0x2d [ 904.132080] sg_new_write.isra.0+0x6f4/0xa10 [ 904.136491] ? sg_rq_end_io_usercontext+0x90/0x90 [ 904.141329] ? sg_remove_request.isra.0+0x250/0x250 [ 904.146344] ? sg_write.part.0+0x373/0xe20 [ 904.150571] ? __might_fault+0x11f/0x1d0 [ 904.154625] ? lock_downgrade+0x720/0x720 [ 904.158762] ? lock_acquire+0x170/0x3c0 [ 904.162723] ? __might_fault+0xef/0x1d0 [ 904.166694] sg_write.part.0+0xa57/0xe20 [ 904.170763] ? sg_new_write.isra.0+0xa10/0xa10 [ 904.175331] ? __might_fault+0x11f/0x1d0 [ 904.179388] ? dump_mm+0x29c/0xca0 [ 904.182922] ? common_file_perm+0x4e5/0x850 [ 904.187237] ? apparmor_getprocattr+0x11e0/0x11e0 [ 904.192084] ? __might_fault+0x192/0x1d0 [ 904.196136] ? _copy_from_user+0xd2/0x130 [ 904.200279] ? iov_iter_advance+0x210/0xdb0 [ 904.204614] sg_write+0x69/0xa0 [ 904.207886] do_iter_write+0x461/0x5d0 [ 904.211769] vfs_writev+0x153/0x2e0 [ 904.215401] ? vfs_iter_write+0xa0/0xa0 [ 904.219364] ? lock_downgrade+0x720/0x720 [ 904.223519] ? check_preemption_disabled+0x41/0x280 [ 904.228539] ? check_preemption_disabled+0x41/0x280 [ 904.233586] ? do_dup2+0x450/0x450 [ 904.237130] ? check_preemption_disabled+0x41/0x280 [ 904.242152] ? wait_for_completion_io+0x10/0x10 [ 904.246825] do_writev+0x136/0x330 [ 904.250362] ? vfs_writev+0x2e0/0x2e0 [ 904.254178] ? trace_hardirqs_off_caller+0x6e/0x210 [ 904.259217] ? do_syscall_64+0x21/0x620 [ 904.263215] do_syscall_64+0xf9/0x620 [ 904.267016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.272204] RIP: 0033:0x7f2c146150c9 [ 904.275910] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 904.294902] RSP: 002b:00007f2c12b87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 904.302607] RAX: ffffffffffffffda RBX: 00007f2c14734f80 RCX: 00007f2c146150c9 04:33:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0802002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000267200000000000000000", 0x200000e4}], 0x2) [ 904.309866] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 904.317122] RBP: 00007f2c12b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 904.324385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.331649] R13: 00007ffc5d11d83f R14: 00007f2c12b87300 R15: 0000000000022000 [ 904.457982] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 904.469060] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.5'. [ 904.496427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) (fail_nth: 71) 04:33:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0902002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006714ce00000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000367200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000002300)=""/56, 0x0, 0x38}, 0x20) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000002380)="4788e548b819cdfeb8000000000f23d80f21f8364e0fc759000f23f8c402fd338302000000123e3664450f01c33cc33c43656766410f3881bee2b95f11c74424002d010000f3460fc73044d8c70f08c744240002000000c744240200000000ff2c412424baf80cb8ba7e6983d67cd07cd0fdb7fc2cfc2c572c577f00c7442400cdbe0000c7442402ba3b0000c7442406000000000f011424", 0x98}], 0x1, 0x40, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000180)=0x5) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@udp6, 0x1}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000002300)=""/56, 0x0, 0x38}, 0x20) (async) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000002380)="4788e548b819cdfeb8000000000f23d80f21f8364e0fc759000f23f8c402fd338302000000123e3664450f01c33cc33c43656766410f3881bee2b95f11c74424002d010000f3460fc73044d8c70f08c744240002000000c744240200000000ff2c412424baf80cb8ba7e6983d67cd07cd0fdb7fc2cfc2c572c577f00c7442400cdbe0000c7442402ba3b0000c7442406000000000f011424", 0x98}], 0x1, 0x40, 0x0, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x9) (async) ftruncate(r4, 0x800) (async) lseek(r4, 0x200, 0x0) (async) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000180)=0x5) (async) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@udp6, 0x1}, 0x20) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x11c, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='syz_tun\x00'}, @typed={0xc, 0x2, 0x0, 0x0, @u64}, @generic="50bb2d6f67d2fb3aabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb8100f81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a66f167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x11c}], 0x1}, 0x0) 04:33:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0a02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000467200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067600000200000000000", 0x200000e4}], 0x2) [ 904.666854] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 904.695384] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0b02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000567200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200200000000000000", 0x200000e4}], 0x2) [ 904.736333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x11c, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='syz_tun\x00'}, @typed={0xc, 0x2, 0x0, 0x0, @u64}, @generic="50bb2d6f67d2fb3aabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb8100f81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a66f167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x11c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x11c, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='syz_tun\x00'}, @typed={0xc, 0x2, 0x0, 0x0, @u64}, @generic="50bb2d6f67d2fb3aabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb8100f81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a66f167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x11c}], 0x1}, 0x0) (async) 04:33:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090902002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000867200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000002300)=""/56, 0x0, 0x38}, 0x20) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000002380)="4788e548b819cdfeb8000000000f23d80f21f8364e0fc759000f23f8c402fd338302000000123e3664450f01c33cc33c43656766410f3881bee2b95f11c74424002d010000f3460fc73044d8c70f08c744240002000000c744240200000000ff2c412424baf80cb8ba7e6983d67cd07cd0fdb7fc2cfc2c572c577f00c7442400cdbe0000c7442402ba3b0000c7442406000000000f011424", 0x98}], 0x1, 0x40, 0x0, 0x0) (async) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) (async, rerun: 32) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000180)=0x5) (async) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@udp6, 0x1}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0c02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:16 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200300000000000000", 0x200000e4}], 0x2) [ 904.863175] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000967200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090903002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 904.907552] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0d02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200400000000000000", 0x200000e4}], 0x2) [ 904.958333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000d67200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0e02002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 905.012332] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 905.039438] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:17 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e351f61b3b125f056ac3c9ae40ee443824718c506c4357e5ec1d37bf409198647b8b3f1b"], 0xce) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090904002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000004867200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200500000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getpid() getpgrp(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000002840)=""/215, 0xd7}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000002a40)=""/146, 0x92}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f0000002b00)=""/49, 0x31}, {&(0x7f0000002b40)=""/222, 0xde}, {&(0x7f0000002c40)=""/214, 0xd6}, {&(0x7f0000002d40)=""/239, 0xef}], 0x9, &(0x7f0000002f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5}, {0x2, 0x2}, {}], {0x4, 0x5}, [{0x8, 0x4}], {0x10, 0x1}}, 0x44, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x88) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="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"]) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x2284, 0x0) creat(&(0x7f0000003000)='./bus\x00', 0x20) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x40400) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000300000000002000000000000000"], 0x54, 0x1) setresgid(0xee01, r1, r4) setxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 905.086327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f0f02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090905002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000006867200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200700000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e351f61b3b125f056ac3c9ae40ee443824718c506c4357e5ec1d37bf409198647b8b3f1b"], 0xce) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090908002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200800000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000006967200000000000000000", 0x200000e4}], 0x2) [ 905.305635] overlayfs: unrecognized mount option "}pperdir=./bus" or missing value 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1102002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200900000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) getpid() (async) getpgrp(0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000002840)=""/215, 0xd7}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000002a40)=""/146, 0x92}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f0000002b00)=""/49, 0x31}, {&(0x7f0000002b40)=""/222, 0xde}, {&(0x7f0000002c40)=""/214, 0xd6}, {&(0x7f0000002d40)=""/239, 0xef}], 0x9, &(0x7f0000002f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5}, {0x2, 0x2}, {}], {0x4, 0x5}, [{0x8, 0x4}], {0x10, 0x1}}, 0x44, 0x2) (async) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) (async, rerun: 32) creat(&(0x7f0000000180)='./bus/file0\x00', 0x88) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="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"]) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SG_GET_SG_TABLESIZE(r3, 0x2284, 0x0) (async) creat(&(0x7f0000003000)='./bus\x00', 0x20) (async) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x40400) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000300000000002000000000000000"], 0x54, 0x1) (async) setresgid(0xee01, r1, r4) setxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 04:33:17 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e351f61b3b125f056ac3c9ae40ee443824718c506c4357e5ec1d37bf409198647b8b3f1b"], 0xce) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090909002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067030000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200d00000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1202002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067050000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067202900000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae09090d002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067070000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067202a00000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) getpid() (async) getpgrp(0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000002840)=""/215, 0xd7}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000002a40)=""/146, 0x92}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f0000002b00)=""/49, 0x31}, {&(0x7f0000002b40)=""/222, 0xde}, {&(0x7f0000002c40)=""/214, 0xd6}, {&(0x7f0000002d40)=""/239, 0xef}], 0x9, &(0x7f0000002f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5}, {0x2, 0x2}, {}], {0x4, 0x5}, [{0x8, 0x4}], {0x10, 0x1}}, 0x44, 0x2) (async) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) (async) creat(&(0x7f0000000180)='./bus/file0\x00', 0x88) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="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"]) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x2284, 0x0) creat(&(0x7f0000003000)='./bus\x00', 0x20) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x40400) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000300000000002000000000000000"], 0x54, 0x1) (async) setresgid(0xee01, r1, r4) setxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') (async) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1302002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e01800000000000003d302c73686f72746e616d653d77696e39352c757466383d302c73686f72746e6168653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d312c757365667265652c636f6465706167653d3733372c6e6f6e756d7661696c3d302c756e695f786c6174657d312c001035cba4b200285cbbb101b8c3c91e59f93c5c847e115cedb7da0b6c181a1346415ebf48f9e21b43d8184e55a4c0fb732dedbc7b935937cf5b22ce6f9134e9244ce28ebc019766e83acd8ee188f5926894fa41a0b490ff12942303bee64648d76cd109261403274f79dbd58e5b1a74d680"], 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067090000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090982002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067204800000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1402002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x100, 0x1000, 0x6, 0x401, 0x80000001, 0xfffff369, 0x3ff, 0x2, 0x9, 0x0, 0x8, 0xc356, 0x1000000000000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001640)={{r0, 0x86, 0x8, 0x80, 0x401, 0x80000000, 0x4, 0x1, 0x2, 0xfffffffd, 0x100, 0x7fffffff, 0x1, 0xf88e}}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x804810, &(0x7f0000000200)={[{@grpjquota}, {@nodelalloc}, {@init_itable}]}, 0x1, 0x748, &(0x7f0000000ec0)="$eJzs3M9rHOUbAPBnptn+zPe7ETyoBxFaaKF0kjSX9tR48VYoFLzWkExCyCQbspvajQVbz0JtLgqC6N2jV6HUP8CbFBS8C6I1HsTLym42qY276zY/upJ+PjDM874zO8/7dIe3O5B3AnhhvRERRyJiOCKuRUS53Z9GxNFWdDzizuZ5G49vTze3JBqN678kkTT7GuXtayXt/alofSReiYiHpYjzH/wzb7W+tjBVFPlKuz1aW1werdbXLswvTs3lc/nS+MTlsUsTE5fGJvat1jNvXz5x/9u31te/+6p27/WhC0lMtuqOdm37luhvNv9NSjG5o3/pIJINUDLoAQAA0Je0/ft/qPUrtRxHWhEAAABwmDSONQAAAIBDL4lBjwAAAAA4WFt/B7C1tveg1sF28/ObETHSKf9Qaw1xxPEoRcTJjeSplQnJ5sdgT+7cjYgHkx3uv6R9/+3e2I7202ukj+7x6uyHB835Z7LT/JNuzz/RYf4Zar87Ya+6z39P8h/pMv9d6zPH15+9Wuqa/27Ea0Od8ifb+ZMu+d/pM/+99Q/vdzvW+CLibMf/f5KncvV4P8To7HzR8/UDD/8896hX/Se75U9617/cZ/3vbfy20G0uaeY/d7r3998pf/Oe+Kg9jjQi7rf3zfb6jhynF7//plf9MxGN3Xz/n/dZ/49fHrvV56kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQkkbEcCRpth2naZZFnIqIl+NkWlSqtfOzldWlmeaxiJEopbPzRT4WEeXNdtJsj7fiJ+2LO9oTEfHSDyc2k84XeTZdKWYGXTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbTkXEcCRpFhFpRPxeTtMsixga9MAAAACA/TUy6AEAAAAAB87zPwAAABx+u33+T/Z5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChdu3q1ebW2Hh8e7rZnrlZX12o3Lwwk1cXssXV6Wy6srKczVUqc0WeTVcW/+16RaWyPH45Vm+N1vJqbbRaX7uxWFldqt2YX5yay2/kpedSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9quLUlaRYRaStO0yyL+F9EjEQpmZ0v8rGI+H9EPCqXjjXb44MeNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPuuWl9bmCqKfEUgEDy34P2I+A8Mo0cw6JkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBqNbXFqaKIl+pDnokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADFb6UxIRze1s+czwzqNHkz/KrX1EvPvp9Y9vTdVqK+PN/l+3+2uftPsvDmL8AAAA8EK48iwnbz2nbz3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KtaX1uYKop8ZW/BlaivNZIu5wy6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHf+CgAA///acMZp") 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000670a0000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200003000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1502002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 905.786525] FAT-fs (loop4): Unrecognized mount option "n€" or missing value 04:33:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900032000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067230000000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:17 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200005000000000000", 0x200000e4}], 0x2) 04:33:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1602002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900052000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x100, 0x1000, 0x6, 0x401, 0x80000001, 0xfffff369, 0x3ff, 0x2, 0x9, 0x0, 0x8, 0xc356, 0x1000000000000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001640)={{r0, 0x86, 0x8, 0x80, 0x401, 0x80000000, 0x4, 0x1, 0x2, 0xfffffffd, 0x100, 0x7fffffff, 0x1, 0xf88e}}) (async) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x804810, &(0x7f0000000200)={[{@grpjquota}, {@nodelalloc}, {@init_itable}]}, 0x1, 0x748, &(0x7f0000000ec0)="$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") 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067480000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200007000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e01800000000000003d302c73686f72746e616d653d77696e39352c757466383d302c73686f72746e6168653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d312c757365667265652c636f6465706167653d3733372c6e6f6e756d7661696c3d302c756e695f786c6174657d312c001035cba4b200285cbbb101b8c3c91e59f93c5c847e115cedb7da0b6c181a1346415ebf48f9e21b43d8184e55a4c0fb732dedbc7b935937cf5b22ce6f9134e9244ce28ebc019766e83acd8ee188f5926894fa41a0b490ff12942303bee64648d76cd109261403274f79dbd58e5b1a74d680"], 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1702002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067000300000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200009000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900092000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1802002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x100, 0x1000, 0x6, 0x401, 0x80000001, 0xfffff369, 0x3ff, 0x2, 0x9, 0x0, 0x8, 0xc356, 0x1000000000000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001640)={{r0, 0x86, 0x8, 0x80, 0x401, 0x80000000, 0x4, 0x1, 0x2, 0xfffffffd, 0x100, 0x7fffffff, 0x1, 0xf88e}}) (async) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x804810, &(0x7f0000000200)={[{@grpjquota}, {@nodelalloc}, {@init_itable}]}, 0x1, 0x748, &(0x7f0000000ec0)="$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") 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067206000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000d000000000000", 0x200000e4}], 0x2) [ 906.095566] FAT-fs (loop4): Unrecognized mount option "n€" or missing value 04:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000d2000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x41029, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) getpid() ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000780)={0x5, 0x80, 0x9, 0x80, 0x53, 0x9, 0x0, 0x7f, 0x400, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000740), 0x4}, 0x1000, 0x0, 0xfd2, 0x0, 0x4f, 0x10000, 0xfffa, 0x0, 0x8, 0x0, 0xfffffffeffffffff}) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18400000000000b8f552f2334aadf10000000020821ef8c3a946754b76af399500000000000000148f2e2fc4e658f4361432fbc78defb19c69ca2a7d159b3632582d9a929feccf9ee13326985d326e5118e8cdb75e09fa4fc17c2fd8e091069250bab49069a8556b0fd963"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="fd0000006989000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xffffffff, 0x200, 0x3, 0x100, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x6}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/272], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000680)=0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3, 0x40, 0xff, 0x9, 0x0, 0x83d1, 0x78, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x1800, 0x7fffffff, 0x3, 0x9, 0x5, 0x8, 0x75, 0x0, 0xe47d, 0x0, 0x6}, 0x0, 0x1, r1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800002, 0x4028011, r7, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(r8, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 04:33:18 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e22, 0xff, @empty, 0x2}, 0x1c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000057c0)={&(0x7f0000000180), 0xc, &(0x7f0000005780)={&(0x7f0000005700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00082bbd7000fcdbdf2508000000080032000700000008ff2c00000400000500290000000000050030000000000008003400000000004500380000000000"], 0x44}}, 0x8004) r4 = socket(0x200000000000011, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000005800)={0xa, 0x0, 0x8, @mcast1, 0x8}, 0x1c, &(0x7f0000005980)=[{0x0}], 0x1}}], 0x1, 0x40000010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) 04:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1902002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067206700000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720dc1f000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909dc1f2000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e22, 0xff, @empty, 0x2}, 0x1c) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000057c0)={&(0x7f0000000180), 0xc, &(0x7f0000005780)={&(0x7f0000005700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00082bbd7000fcdbdf2508000000080032000700000008ff2c00000400000500290000000000050030000000000008003400000000004500380000000000"], 0x44}}, 0x8004) r4 = socket(0x200000000000011, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000005800)={0xa, 0x0, 0x8, @mcast1, 0x8}, 0x1c, &(0x7f0000005980)=[{0x0}], 0x1}}], 0x1, 0x40000010) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067149200000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1a02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200020000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067600000200000000000", 0x200000e4}], 0x2) 04:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900202000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x41029, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) getpid() (async, rerun: 32) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000780)={0x5, 0x80, 0x9, 0x80, 0x53, 0x9, 0x0, 0x7f, 0x400, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000740), 0x4}, 0x1000, 0x0, 0xfd2, 0x0, 0x4f, 0x10000, 0xfffa, 0x0, 0x8, 0x0, 0xfffffffeffffffff}) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18400000000000b8f552f2334aadf10000000020821ef8c3a946754b76af399500000000000000148f2e2fc4e658f4361432fbc78defb19c69ca2a7d159b3632582d9a929feccf9ee13326985d326e5118e8cdb75e09fa4fc17c2fd8e091069250bab49069a8556b0fd963"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="fd0000006989000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xffffffff, 0x200, 0x3, 0x100, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x6}, 0x48) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/272], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') (async, rerun: 32) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000680)=0x3) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3, 0x40, 0xff, 0x9, 0x0, 0x83d1, 0x78, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x1800, 0x7fffffff, 0x3, 0x9, 0x5, 0x8, 0x75, 0x0, 0xe47d, 0x0, 0x6}, 0x0, 0x1, r1, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800002, 0x4028011, r7, 0x0) (async) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(r8, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 04:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1b02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200029000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200200000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900822000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1c02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e22, 0xff, @empty, 0x2}, 0x1c) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000057c0)={&(0x7f0000000180), 0xc, &(0x7f0000005780)={&(0x7f0000005700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00082bbd7000fcdbdf2508000000080032000700000008ff2c00000400000500290000000000050030000000000008003400000000004500380000000000"], 0x44}}, 0x8004) (async, rerun: 64) r4 = socket(0x200000000000011, 0x3, 0x0) (rerun: 64) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000005800)={0xa, 0x0, 0x8, @mcast1, 0x8}, 0x1c, &(0x7f0000005980)=[{0x0}], 0x1}}], 0x1, 0x40000010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (rerun: 32) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720002a000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200300000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1d02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae09091fdc2000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200400000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x41029, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (rerun: 64) getpid() ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000780)={0x5, 0x80, 0x9, 0x80, 0x53, 0x9, 0x0, 0x7f, 0x400, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000740), 0x4}, 0x1000, 0x0, 0xfd2, 0x0, 0x4f, 0x10000, 0xfffa, 0x0, 0x8, 0x0, 0xfffffffeffffffff}) (async, rerun: 64) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18400000000000b8f552f2334aadf10000000020821ef8c3a946754b76af399500000000000000148f2e2fc4e658f4361432fbc78defb19c69ca2a7d159b3632582d9a929feccf9ee13326985d326e5118e8cdb75e09fa4fc17c2fd8e091069250bab49069a8556b0fd963"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="fd0000006989000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xffffffff, 0x200, 0x3, 0x100, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x6}, 0x48) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/272], 0xa) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') (async, rerun: 32) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000680)=0x3) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3, 0x40, 0xff, 0x9, 0x0, 0x83d1, 0x78, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x1800, 0x7fffffff, 0x3, 0x9, 0x5, 0x8, 0x75, 0x0, 0xe47d, 0x0, 0x6}, 0x0, 0x1, r1, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800002, 0x4028011, r7, 0x0) (rerun: 64) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(r8, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200048000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200500000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f1e02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900004000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x41029, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) getpid() ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000780)={0x5, 0x80, 0x9, 0x80, 0x53, 0x9, 0x0, 0x7f, 0x400, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000740), 0x4}, 0x1000, 0x0, 0xfd2, 0x0, 0x4f, 0x10000, 0xfffa, 0x0, 0x8, 0x0, 0xfffffffeffffffff}) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18400000000000b8f552f2334aadf10000000020821ef8c3a946754b76af399500000000000000148f2e2fc4e658f4361432fbc78defb19c69ca2a7d159b3632582d9a929feccf9ee13326985d326e5118e8cdb75e09fa4fc17c2fd8e091069250bab49069a8556b0fd963"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="fd0000006989000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xffffffff, 0x200, 0x3, 0x100, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x6}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/272], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000680)=0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3, 0x40, 0xff, 0x9, 0x0, 0x83d1, 0x78, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x1800, 0x7fffffff, 0x3, 0x9, 0x5, 0x8, 0x75, 0x0, 0xe47d, 0x0, 0x6}, 0x0, 0x1, r1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800002, 0x4028011, r7, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(r8, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 04:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200800000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067201fdc000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2102002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909ffff8000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067202d14070000000000", 0x200000e4}], 0x2) 04:33:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2202002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6a756d7461696c3d302c73686f72746e616d653d77696e39352c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d312c757365667a65652c636f6465706167033d3733372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c00"], 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000200000000000", 0x200000e4}], 0x2) 04:33:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000003000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067207ffff00000000000", 0x200000e4}], 0x2) 04:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200900000000000000", 0x200000e4}], 0x2) 04:33:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x100000000}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000340)=0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0xfffffffffffffffe, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="5b6e512ee787000000290100ffffff7f20010000000600000000000000040a0000000000000527002e2f66696c65308003000000040000000000000082030000000000000507002e2f66696c65300404000000010000000000000009000000000000000107002e2f66696c6530000100dfff0600000000120000d800000c00000000ff07002e2f66696c65303b914a0d62c71e5c205e6d80031cfbc00cbd6176eb4759c1cf15f03e473121c7b1129cc33336b22fcb26db540508ec6902cb056e556966ee05ca7ca67f4051a541f58dd536e6a7fee03b0963f240c87659b376ba7a036eab65aab8ec1889d1d2b22b21651930bfa391faf73d3f6ac1"], 0x87) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000440)=0xffffff10, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="1d", 0x1, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000003c0)="c0", 0x1, 0x3fffffa, 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73466375726974792e212702"], &(0x7f00000000c0)='\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 04:33:19 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000100000000", 0x200000e4}], 0x2) 04:33:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6a756d7461696c3d302c73686f72746e616d653d77696e39352c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d312c757365667a65652c636f6465706167033d3733372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c00"], 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 907.823690] FAT-fs (loop4): Unrecognized mount option "nojumtail=0" or missing value 04:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2302002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200d00000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000015cd000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x100000000}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000340)=0x8) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0xfffffffffffffffe, 0x0) (async) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x87) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000440)=0xffffff10, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000180)="1d", 0x1, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r1, &(0x7f00000003c0)="c0", 0x1, 0x3fffffa, 0x0, 0x0) (async) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73466375726974792e212702"], &(0x7f00000000c0)='\x00', 0x1, 0x2) (async) dup3(r0, r1, 0x0) 04:33:20 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000200000000", 0x200000e4}], 0x2) [ 907.997552] FAT-fs (loop4): Unrecognized mount option "nojumtail=0" or missing value 04:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2402002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900030000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067204800000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x100000000}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) ioctl$NBD_DO_IT(r3, 0xab03) (async, rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000340)=0x8) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0xfffffffffffffffe, 0x0) (async) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="5b6e512ee787000000290100ffffff7f20010000000600000000000000040a0000000000000527002e2f66696c65308003000000040000000000000082030000000000000507002e2f66696c65300404000000010000000000000009000000000000000107002e2f66696c6530000100dfff0600000000120000d800000c00000000ff07002e2f66696c65303b914a0d62c71e5c205e6d80031cfbc00cbd6176eb4759c1cf15f03e473121c7b1129cc33336b22fcb26db540508ec6902cb056e556966ee05ca7ca67f4051a541f58dd536e6a7fee03b0963f240c87659b376ba7a036eab65aab8ec1889d1d2b22b21651930bfa391faf73d3f6ac1"], 0x87) (async) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000440)=0xffffff10, 0x4) (async) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="1d", 0x1, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, 0x1c) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r6 = fcntl$getown(0xffffffffffffffff, 0x9) (rerun: 64) perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000003c0)="c0", 0x1, 0x3fffffa, 0x0, 0x0) (async) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73466375726974792e212702"], &(0x7f00000000c0)='\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 04:33:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6a756d7461696c3d302c73686f72746e616d653d77696e39352c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d312c757365667a65652c636f6465706167033d3733372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c00"], 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:20 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000300000000", 0x200000e4}], 0x2) 04:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2502002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067206800000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000300000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000400000000", 0x200000e4}], 0x2) [ 908.239767] FAT-fs (loop4): Unrecognized mount option "nojumtail=0" or missing value 04:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2602002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x33, @local, 0x4e23, 0x3, 'sed\x00', 0x8, 0x4, 0x8}, {@remote, 0x4e23, 0x1, 0x3f, 0x3c, 0x4f}}, 0x44) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:20 executing program 5: syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x1000000, &(0x7f0000000000)={[{@noquota}, {@fastboot}]}, 0x1, 0x105ec, &(0x7f0000010680)="$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") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x80000001, 0x3, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x67, 0x0, 0x20, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x23, 0x2, [{0x2, 0x2}, {0x1, 0xc, "6798795d42c76c1b59c8"}, {0x1, 0xf, "5b4ada02a28466c3e075e2c859"}]}, @noop, @end, @timestamp_prespec={0x44, 0x34, 0x75, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@empty, 0xffff8000}, {@multicast2, 0x9}, {@multicast2, 0x7}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010100}]}]}}}}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "857c2d53ed0dc03112e5e48bbd0665cd"}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getpgid(0x0) sync() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) sync() r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000004000000000000000006000000", @ANYRES32=r7, @ANYBLOB="0000030005f33fe697d710260a000200"], 0x28}}, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1554) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 04:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067206900000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000500000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000500000000", 0x200000e4}], 0x2) 04:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2702002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200003000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x33, @local, 0x4e23, 0x3, 'sed\x00', 0x8, 0x4, 0x8}, {@remote, 0x4e23, 0x1, 0x3f, 0x3c, 0x4f}}, 0x44) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:20 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000700000000", 0x200000e4}], 0x2) 04:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000700000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2802002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200005000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x33, @local, 0x4e23, 0x3, 'sed\x00', 0x8, 0x4, 0x8}, {@remote, 0x4e23, 0x1, 0x3f, 0x3c, 0x4f}}, 0x44) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) dup3(r1, r0, 0x0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x33, @local, 0x4e23, 0x3, 'sed\x00', 0x8, 0x4, 0x8}, {@remote, 0x4e23, 0x1, 0x3f, 0x3c, 0x4f}}, 0x44) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:21 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000800000000", 0x200000e4}], 0x2) 04:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000900000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2902002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200009000000000000", 0x200000e4}], 0x2) [ 909.265641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:21 executing program 5: syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x1000000, &(0x7f0000000000)={[{@noquota}, {@fastboot}]}, 0x1, 0x105ec, &(0x7f0000010680)="$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") (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x80000001, 0x3, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x67, 0x0, 0x20, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x23, 0x2, [{0x2, 0x2}, {0x1, 0xc, "6798795d42c76c1b59c8"}, {0x1, 0xf, "5b4ada02a28466c3e075e2c859"}]}, @noop, @end, @timestamp_prespec={0x44, 0x34, 0x75, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@empty, 0xffff8000}, {@multicast2, 0x9}, {@multicast2, 0x7}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010100}]}]}}}}}) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "857c2d53ed0dc03112e5e48bbd0665cd"}}}]}, 0x48}}, 0x0) (rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) (async) getpgid(0x0) (async) sync() (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) (async) sync() r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000004000000000000000006000000", @ANYRES32=r7, @ANYBLOB="0000030005f33fe697d710260a000200"], 0x28}}, 0x0) (async, rerun: 64) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1ffff) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1554) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) (rerun: 32) 04:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000a00000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2a02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000d000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000900000000", 0x200000e4}], 0x2) [ 909.388104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2b02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900cd1500000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 5: syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x1000000, &(0x7f0000000000)={[{@noquota}, {@fastboot}]}, 0x1, 0x105ec, &(0x7f0000010680)="$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") (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x80000001, 0x3, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x67, 0x0, 0x20, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x23, 0x2, [{0x2, 0x2}, {0x1, 0xc, "6798795d42c76c1b59c8"}, {0x1, 0xf, "5b4ada02a28466c3e075e2c859"}]}, @noop, @end, @timestamp_prespec={0x44, 0x34, 0x75, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@empty, 0xffff8000}, {@multicast2, 0x9}, {@multicast2, 0x7}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010100}]}]}}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "857c2d53ed0dc03112e5e48bbd0665cd"}}}]}, 0x48}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) (async) getpgid(0x0) (async) sync() (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) sync() r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000004000000000000000006000000", @ANYRES32=r7, @ANYBLOB="0000030005f33fe697d710260a000200"], 0x28}}, 0x0) (async) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1554) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 04:33:21 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000d00000000", 0x200000e4}], 0x2) 04:33:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720dc1f000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(r2, &(0x7f0000000ac0)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r12, @ANYRES8=r10, @ANYRESDEC=0x0, @ANYRES64=r11]) read$FUSE(r12, &(0x7f0000004380)={0x2020}, 0x2020) r13 = geteuid() mount$fuse(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000034c0), 0x1040000, &(0x7f0000003500)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r13}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r14, @ANYRESHEX=r7]) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r4}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r9}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r14}, {0x8, 0x2, r15}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) chown(&(0x7f0000000080)='./file0\x00', 0xee00, r8) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200020000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2c02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900022000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 909.576534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:21 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000002900000000", 0x200000e4}], 0x2) 04:33:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200048000000000000", 0x200000e4}], 0x2) 04:33:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) statx(r2, &(0x7f0000000ac0)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r1, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r10 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r12, @ANYRES8=r10, @ANYRESDEC=0x0, @ANYRES64=r11]) read$FUSE(r12, &(0x7f0000004380)={0x2020}, 0x2020) (async) r13 = geteuid() mount$fuse(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000034c0), 0x1040000, &(0x7f0000003500)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r13}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r14, @ANYRESHEX=r7]) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r4}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r9}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r14}, {0x8, 0x2, r15}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) (async) chown(&(0x7f0000000080)='./file0\x00', 0xee00, r8) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:21 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000002a00000000", 0x200000e4}], 0x2) 04:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900032000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 5: clock_adjtime(0x0, &(0x7f0000000780)={0xef5, 0x2, 0x3, 0x8, 0x800, 0x4, 0x1, 0x0, 0xd72, 0x7, 0x65, 0x1, 0x0, 0x1bb9, 0x1, 0x9, 0x3, 0x7fffffff, 0x8001, 0x0, 0x4f04, 0x401, 0x10000000000, 0x8, 0x1ff, 0x392}) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"d055b5211035341a50839f4c274fd212", 0x0, 0x0, {0x7224, 0x10001}, {0x8, 0xa9e}, 0x401, [0x80000000, 0x0, 0x0, 0x6, 0x0, 0x2, 0xd5, 0x7fffffffffffffff, 0x86f0, 0x0, 0x0, 0x10000040000000, 0x0, 0x7fff, 0x3]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="9bc0c9be00892fa1d5674f371fb4478b945398acb6d25a400000000000000032494e049906b467ebdc9e1d40fe7692d585cdee0300002c51efb8fc732e4bece9ec05000000ce2b4869613f8eceefdf9dfa5f44234accf12b0eb13952050aaa8fc50d4eb5ddd133d6a7230400dc17e7eeb1ff6a93d5f596e4ef2dac5acec36602007bff7bfdd96f3e2f7221d8b0e3000000003e6f2f0000000000000000dd75fd471b5d4e387facd7b1412c08bb5b8c9e635c3ea783514fa94353e270774a4514e051d7b87d95c309f3158a4e9582e0a7ce7db1afacc38051070fb0e574f3257f0d4dac1fb64149f53036bd767e7a4483bf10b65f8965f44e4a25f23f4002680bfea9850fb27a665c0cf0a360784b05", @ANYRESHEX=r5, @ANYRES8=r3, @ANYRESDEC=0x0, @ANYRES64=r4]) ioctl$NBD_DO_IT(r4, 0xab03) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfe, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40049409, 0x0) io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000001c0)="29e5baa804c8814fadb1200ed6257a3c893ea2f00acaa49f230dd37449076aa6a627930380e93ec44bd8f6e3e6b76b8f83b5ab1b721cfa8c3a65c04a9f5e1ed4f008f1d7bd99b1887c1567f3e580041178dc82f86762bdc3e59a27a2114e2747636a27f5eac3c5a11f5eacedd13f6e898680154da9fc", 0x76, 0x10001, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x140, r2, &(0x7f0000000880)="b17e112eff2d1263bd9462fbb600470e4c8d3714bd154eab49fe9566a9f7e9f4f3bbd17aa52f999df7263779f0af12d0c0e6a2c0506c8b793ea20b7c3ab0adbce878e5e8d8a895bbf1ecaae7815e5d173d2469d7b2fb1b667b3e420cdb31fda1e624e0e4b611388363dc1cead9a240f708f0285b1afb2fa0c891ad576a6e19b413ddb18ec923b8d273ea05f9d094fae29198b4e0a6319324ac884bb1a092c88b705d2eb91fb5ad42097f0662b835b1a0da610b3a3ed4b957822f4479c28986d37e7b", 0xc2, 0xdce1, 0x0, 0x0, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x1c79, r6, &(0x7f0000000240)="cb0dd8cc165afc9bc5e5b3a8dba4f26949a4a32beb6868fd6ba313ad106019810edc7817b26a81e4af8f48e3dd6db9d9a2e5c6962ad95309e158", 0x3a, 0x1}]) getxattr(0x0, 0x0, &(0x7f0000000280)=""/212, 0xd4) syz_open_procfs$userns(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400)=0x7fffffff, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000740)=0x4) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x40049409, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000440)={"5c5c2f9a0777dec4e58efdb60c24c595", r1, r1, {0x8000}, {0x6, 0x10000}, 0x7fffffffffffffff, [0x7, 0x1, 0x8000, 0xfd80, 0x8, 0x38, 0x5421, 0x7ff, 0x9, 0x5, 0xd0e, 0x1000, 0xfffffffffffffff8, 0x680b, 0x200, 0x1]}) 04:33:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200068000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2d02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200007142d00000000", 0x200000e4}], 0x2) 04:33:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900042000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r4, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) statx(r2, &(0x7f0000000ac0)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r10 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r12, @ANYRES8=r10, @ANYRESDEC=0x0, @ANYRES64=r11]) read$FUSE(r12, &(0x7f0000004380)={0x2020}, 0x2020) (async) r13 = geteuid() mount$fuse(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000034c0), 0x1040000, &(0x7f0000003500)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r13}}]}}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r14, @ANYRESHEX=r7]) (async) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r4}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r9}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r14}, {0x8, 0x2, r15}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) (async) chown(&(0x7f0000000080)='./file0\x00', 0xee00, r8) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200069000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000004800000000", 0x200000e4}], 0x2) 04:33:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2e02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900052000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:22 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000f0ff7f00000000", 0x200000e4}], 0x2) 04:33:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067201fdc000000000000", 0x200000e4}], 0x2) 04:33:23 executing program 5: clock_adjtime(0x0, &(0x7f0000000780)={0xef5, 0x2, 0x3, 0x8, 0x800, 0x4, 0x1, 0x0, 0xd72, 0x7, 0x65, 0x1, 0x0, 0x1bb9, 0x1, 0x9, 0x3, 0x7fffffff, 0x8001, 0x0, 0x4f04, 0x401, 0x10000000000, 0x8, 0x1ff, 0x392}) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"d055b5211035341a50839f4c274fd212", 0x0, 0x0, {0x7224, 0x10001}, {0x8, 0xa9e}, 0x401, [0x80000000, 0x0, 0x0, 0x6, 0x0, 0x2, 0xd5, 0x7fffffffffffffff, 0x86f0, 0x0, 0x0, 0x10000040000000, 0x0, 0x7fff, 0x3]}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="9bc0c9be00892fa1d5674f371fb4478b945398acb6d25a400000000000000032494e049906b467ebdc9e1d40fe7692d585cdee0300002c51efb8fc732e4bece9ec05000000ce2b4869613f8eceefdf9dfa5f44234accf12b0eb13952050aaa8fc50d4eb5ddd133d6a7230400dc17e7eeb1ff6a93d5f596e4ef2dac5acec36602007bff7bfdd96f3e2f7221d8b0e3000000003e6f2f0000000000000000dd75fd471b5d4e387facd7b1412c08bb5b8c9e635c3ea783514fa94353e270774a4514e051d7b87d95c309f3158a4e9582e0a7ce7db1afacc38051070fb0e574f3257f0d4dac1fb64149f53036bd767e7a4483bf10b65f8965f44e4a25f23f4002680bfea9850fb27a665c0cf0a360784b05", @ANYRESHEX=r5, @ANYRES8=r3, @ANYRESDEC=0x0, @ANYRES64=r4]) (async) ioctl$NBD_DO_IT(r4, 0xab03) (async) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfe, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40049409, 0x0) (async) io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000001c0)="29e5baa804c8814fadb1200ed6257a3c893ea2f00acaa49f230dd37449076aa6a627930380e93ec44bd8f6e3e6b76b8f83b5ab1b721cfa8c3a65c04a9f5e1ed4f008f1d7bd99b1887c1567f3e580041178dc82f86762bdc3e59a27a2114e2747636a27f5eac3c5a11f5eacedd13f6e898680154da9fc", 0x76, 0x10001, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x140, r2, &(0x7f0000000880)="b17e112eff2d1263bd9462fbb600470e4c8d3714bd154eab49fe9566a9f7e9f4f3bbd17aa52f999df7263779f0af12d0c0e6a2c0506c8b793ea20b7c3ab0adbce878e5e8d8a895bbf1ecaae7815e5d173d2469d7b2fb1b667b3e420cdb31fda1e624e0e4b611388363dc1cead9a240f708f0285b1afb2fa0c891ad576a6e19b413ddb18ec923b8d273ea05f9d094fae29198b4e0a6319324ac884bb1a092c88b705d2eb91fb5ad42097f0662b835b1a0da610b3a3ed4b957822f4479c28986d37e7b", 0xc2, 0xdce1, 0x0, 0x0, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x1c79, r6, &(0x7f0000000240)="cb0dd8cc165afc9bc5e5b3a8dba4f26949a4a32beb6868fd6ba313ad106019810edc7817b26a81e4af8f48e3dd6db9d9a2e5c6962ad95309e158", 0x3a, 0x1}]) getxattr(0x0, 0x0, &(0x7f0000000280)=""/212, 0xd4) (async) syz_open_procfs$userns(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) (async) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400)=0x7fffffff, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000740)=0x4) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x40049409, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000440)={"5c5c2f9a0777dec4e58efdb60c24c595", r1, r1, {0x8000}, {0x6, 0x10000}, 0x7fffffffffffffff, [0x7, 0x1, 0x8000, 0xfd80, 0x8, 0x38, 0x5421, 0x7ff, 0x9, 0x5, 0xd0e, 0x1000, 0xfffffffffffffff8, 0x680b, 0x200, 0x1]}) 04:33:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f2f02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067202d14070000000000", 0x200000e4}], 0x2) 04:33:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900082000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:23 executing program 4: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x7712, 0xfffffffa, 0x80080, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x3, 0xfffffffffffffff9) r1 = signalfd(r0, &(0x7f0000000100)={[0x7fff]}, 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x68, 0x0, 0x625, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", ""]}, 0x68}}, 0x4000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@quiet}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/145) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b63de08913130524e2030853ef723a44c13b2a668ca5b9d68fa537ab87c3921a1dcf5df02d9a2fab267333fc625be638765de1170bf4247bfcdf2c9027a096324b5561b52c61479d3beb3903383d8544c3f0f7c7762aecfc3f45515275b61188e97569aaaf9bb523f2b7cc4a0cc909ee3ca90"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40049409, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 04:33:23 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000001fdc00000000", 0x200000e4}], 0x2) 04:33:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900092000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:23 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720fffffffb00000000", 0x200000e4}], 0x2) 04:33:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000200000000000", 0x200000e4}], 0x2) 04:33:23 executing program 4: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x7712, 0xfffffffa, 0x80080, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x3, 0xfffffffffffffff9) r1 = signalfd(r0, &(0x7f0000000100)={[0x7fff]}, 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x68, 0x0, 0x625, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", ""]}, 0x68}}, 0x4000) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@quiet}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async, rerun: 32) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/145) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b63de08913130524e2030853ef723a44c13b2a668ca5b9d68fa537ab87c3921a1dcf5df02d9a2fab267333fc625be638765de1170bf4247bfcdf2c9027a096324b5561b52c61479d3beb3903383d8544c3f0f7c7762aecfc3f45515275b61188e97569aaaf9bb523f2b7cc4a0cc909ee3ca90"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40049409, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 04:33:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3102002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:24 executing program 5: clock_adjtime(0x0, &(0x7f0000000780)={0xef5, 0x2, 0x3, 0x8, 0x800, 0x4, 0x1, 0x0, 0xd72, 0x7, 0x65, 0x1, 0x0, 0x1bb9, 0x1, 0x9, 0x3, 0x7fffffff, 0x8001, 0x0, 0x4f04, 0x401, 0x10000000000, 0x8, 0x1ff, 0x392}) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"d055b5211035341a50839f4c274fd212", 0x0, 0x0, {0x7224, 0x10001}, {0x8, 0xa9e}, 0x401, [0x80000000, 0x0, 0x0, 0x6, 0x0, 0x2, 0xd5, 0x7fffffffffffffff, 0x86f0, 0x0, 0x0, 0x10000040000000, 0x0, 0x7fff, 0x3]}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRES8=r3, @ANYRESDEC=0x0, @ANYRES64=r4]) (async) ioctl$NBD_DO_IT(r4, 0xab03) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfe, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40049409, 0x0) (async) io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000001c0)="29e5baa804c8814fadb1200ed6257a3c893ea2f00acaa49f230dd37449076aa6a627930380e93ec44bd8f6e3e6b76b8f83b5ab1b721cfa8c3a65c04a9f5e1ed4f008f1d7bd99b1887c1567f3e580041178dc82f86762bdc3e59a27a2114e2747636a27f5eac3c5a11f5eacedd13f6e898680154da9fc", 0x76, 0x10001, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x140, r2, &(0x7f0000000880)="b17e112eff2d1263bd9462fbb600470e4c8d3714bd154eab49fe9566a9f7e9f4f3bbd17aa52f999df7263779f0af12d0c0e6a2c0506c8b793ea20b7c3ab0adbce878e5e8d8a895bbf1ecaae7815e5d173d2469d7b2fb1b667b3e420cdb31fda1e624e0e4b611388363dc1cead9a240f708f0285b1afb2fa0c891ad576a6e19b413ddb18ec923b8d273ea05f9d094fae29198b4e0a6319324ac884bb1a092c88b705d2eb91fb5ad42097f0662b835b1a0da610b3a3ed4b957822f4479c28986d37e7b", 0xc2, 0xdce1, 0x0, 0x0, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x1c79, r6, &(0x7f0000000240)="cb0dd8cc165afc9bc5e5b3a8dba4f26949a4a32beb6868fd6ba313ad106019810edc7817b26a81e4af8f48e3dd6db9d9a2e5c6962ad95309e158", 0x3a, 0x1}]) getxattr(0x0, 0x0, &(0x7f0000000280)=""/212, 0xd4) (async) syz_open_procfs$userns(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) (async) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400)=0x7fffffff, 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000740)=0x4) (async) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x40049409, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000440)={"5c5c2f9a0777dec4e58efdb60c24c595", r1, r1, {0x8000}, {0x6, 0x10000}, 0x7fffffffffffffff, [0x7, 0x1, 0x8000, 0xfd80, 0x8, 0x38, 0x5421, 0x7ff, 0x9, 0x5, 0xd0e, 0x1000, 0xfffffffffffffff8, 0x680b, 0x200, 0x1]}) 04:33:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067207ffff00000000000", 0x200000e4}], 0x2) 04:33:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000d2000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:24 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720fbffffff00000000", 0x200000e4}], 0x2) 04:33:24 executing program 4: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x7712, 0xfffffffa, 0x80080, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x3, 0xfffffffffffffff9) r1 = signalfd(r0, &(0x7f0000000100)={[0x7fff]}, 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x68, 0x0, 0x625, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", ""]}, 0x68}}, 0x4000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@quiet}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/145) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b63de08913130524e2030853ef723a44c13b2a668ca5b9d68fa537ab87c3921a1dcf5df02d9a2fab267333fc625be638765de1170bf4247bfcdf2c9027a096324b5561b52c61479d3beb3903383d8544c3f0f7c7762aecfc3f45515275b61188e97569aaaf9bb523f2b7cc4a0cc909ee3ca90"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40049409, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x7712, 0xfffffffa, 0x80080}) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x3, 0xfffffffffffffff9) (async) signalfd(r0, &(0x7f0000000100)={[0x7fff]}, 0x8) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x68, 0x0, 0x625, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", ""]}, 0x68}}, 0x4000) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@quiet}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/145) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b63de08913130524e2030853ef723a44c13b2a668ca5b9d68fa537ab87c3921a1dcf5df02d9a2fab267333fc625be638765de1170bf4247bfcdf2c9027a096324b5561b52c61479d3beb3903383d8544c3f0f7c7762aecfc3f45515275b61188e97569aaaf9bb523f2b7cc4a0cc909ee3ca90"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40049409, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) 04:33:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3202002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3302002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000100000000", 0x200000e4}], 0x2) 04:33:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900822000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:24 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000f0ffffff7f0000", 0x200000e4}], 0x2) 04:33:24 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(r3, &(0x7f0000000ac0)='./file0\x00', 0x800, 0x4, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r10, @ANYRESHEX=r7]) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r9}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r10}, {0x8, 0x2, r11}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r2, r10, 0x400) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000140)=""/68, &(0x7f0000000080)=0x44) setuid(r2) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3402002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x44980) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_DO_IT(r1, 0xab03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x25dfdbff, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x40010) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000000c0)}, {&(0x7f00000011c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/82, 0x52}], 0x5}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/214, 0xd6}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/126, 0x7e}, {0x0}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000c00)=""/215, 0xd7}], 0x6, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000018078f7440400000100821546bb0000a33477cf36df99e3c6e9e5b51fba1e581e4f5f46522ae686e832d143684bfa4837c8f8ac7cc4adca3e87319a0da48d2ff904f6a6d8c78f1a842ae8df3a7f272218f11f0bfe445bec9fac01888d185707765e325a13e414588b0c053a12d71d8c1942a8d7f56e223b7d24c4b974b722c9fa0931dad11ec87d6be6644c10e054f5db59d00a3883c51b798b1bf587c3f1f1ef8562f214df3a58cb8578c7940d8e5dad10c904055eff7029fb65150bdadf2f363cc8877e0e48c642ef41", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000005708422f528913c480868f4bfde10c696aeb4679cd47c1001cb4c138a7fa89551c84cf2842719b9a2d4a44df263674b44cad4f186739f53e02c40869125f970bd39d3c1a3ed32f484c9d9da46d1f4f004fab52fffbd2f390285ef7fdb097bde7eedfa5ab71d1a2116172b80bff939ba7dd5ca9f34a01889a630dfc741ea6fc1373857eef4199f0db3aafdf34cf8b9222b71466cdfc44de4d4b94228ef1509bd6a700"/195, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000001c00000000000000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x108}}], 0x2, 0x2000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x66, 0x80, 0xb0, 0x0, 0x3, 0x84006, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1e1, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff8}, 0x200e, 0x7f, 0x6, 0x6, 0xfc0, 0x800, 0x0, 0x0, 0x7, 0x0, 0x334d916e}, 0x0, 0x6, 0xffffffffffffffff, 0x0) quotactl(0x40000080000101, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) socket(0x0, 0x0, 0x101) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x8, r6, 0x1}) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0x541b, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000680)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x5}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0}) r8 = getpgrp(0xffffffffffffffff) getpid() syz_open_procfs(r8, &(0x7f00000001c0)='net/stat\x00') r9 = getpgid(r8) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x40, 0x52, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x5, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xfffffff6}, r9, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002300000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000200000000", 0x200000e4}], 0x2) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000100", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3502002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) statx(r3, &(0x7f0000000ac0)='./file0\x00', 0x800, 0x4, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) read$FUSE(r3, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r10, @ANYRESHEX=r7]) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r9}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r10}, {0x8, 0x2, r11}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r2, r10, 0x400) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000140)=""/68, &(0x7f0000000080)=0x44) (async, rerun: 64) setuid(r2) (async, rerun: 64) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000300000000", 0x200000e4}], 0x2) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900004000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000002000", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3602002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) (async, rerun: 32) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(r3, &(0x7f0000000ac0)='./file0\x00', 0x800, 0x4, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r3, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) (rerun: 32) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r10, @ANYRESHEX=r7]) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r9}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r10}, {0x8, 0x2, r11}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) (async) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r2, r10, 0x400) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000140)=""/68, &(0x7f0000000080)=0x44) (async, rerun: 64) setuid(r2) (async, rerun: 64) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000400000000", 0x200000e4}], 0x2) 04:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x44980) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_DO_IT(r1, 0xab03) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x25dfdbff, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x40010) (async, rerun: 64) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000000c0)}, {&(0x7f00000011c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/82, 0x52}], 0x5}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/214, 0xd6}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/126, 0x7e}, {0x0}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000c00)=""/215, 0xd7}], 0x6, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000018078f7440400000100821546bb0000a33477cf36df99e3c6e9e5b51fba1e581e4f5f46522ae686e832d143684bfa4837c8f8ac7cc4adca3e87319a0da48d2ff904f6a6d8c78f1a842ae8df3a7f272218f11f0bfe445bec9fac01888d185707765e325a13e414588b0c053a12d71d8c1942a8d7f56e223b7d24c4b974b722c9fa0931dad11ec87d6be6644c10e054f5db59d00a3883c51b798b1bf587c3f1f1ef8562f214df3a58cb8578c7940d8e5dad10c904055eff7029fb65150bdadf2f363cc8877e0e48c642ef41", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000005708422f528913c480868f4bfde10c696aeb4679cd47c1001cb4c138a7fa89551c84cf2842719b9a2d4a44df263674b44cad4f186739f53e02c40869125f970bd39d3c1a3ed32f484c9d9da46d1f4f004fab52fffbd2f390285ef7fdb097bde7eedfa5ab71d1a2116172b80bff939ba7dd5ca9f34a01889a630dfc741ea6fc1373857eef4199f0db3aafdf34cf8b9222b71466cdfc44de4d4b94228ef1509bd6a700"/195, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000001c00000000000000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x108}}], 0x2, 0x2000, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x66, 0x80, 0xb0, 0x0, 0x3, 0x84006, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1e1, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff8}, 0x200e, 0x7f, 0x6, 0x6, 0xfc0, 0x800, 0x0, 0x0, 0x7, 0x0, 0x334d916e}, 0x0, 0x6, 0xffffffffffffffff, 0x0) quotactl(0x40000080000101, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = eventfd2(0x0, 0x0) socket(0x0, 0x0, 0x101) (async, rerun: 32) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x8, r6, 0x1}) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000680)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x5}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0}) (async) r8 = getpgrp(0xffffffffffffffff) (async) getpid() syz_open_procfs(r8, &(0x7f00000001c0)='net/stat\x00') r9 = getpgid(r8) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x40, 0x52, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x5, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xfffffff6}, r9, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000007ffff000", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3702002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000080ffff0090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win95,utf8=0,shorortname=winnt,utf8=0,utf8=1,uni_xlate=1,usefree,codepage=737,nonumtail=0,uni_xlate=1,\x00'/139], 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000300000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3802002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000500000000", 0x200000e4}], 0x2) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000007ffffffff000", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3902002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000001", 0x200000e4}], 0x2) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000500000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x44980) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$NBD_DO_IT(r1, 0xab03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x25dfdbff, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x40010) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000000c0)}, {&(0x7f00000011c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/82, 0x52}], 0x5}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/214, 0xd6}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/126, 0x7e}, {0x0}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000c00)=""/215, 0xd7}], 0x6, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000018078f7440400000100821546bb0000a33477cf36df99e3c6e9e5b51fba1e581e4f5f46522ae686e832d143684bfa4837c8f8ac7cc4adca3e87319a0da48d2ff904f6a6d8c78f1a842ae8df3a7f272218f11f0bfe445bec9fac01888d185707765e325a13e414588b0c053a12d71d8c1942a8d7f56e223b7d24c4b974b722c9fa0931dad11ec87d6be6644c10e054f5db59d00a3883c51b798b1bf587c3f1f1ef8562f214df3a58cb8578c7940d8e5dad10c904055eff7029fb65150bdadf2f363cc8877e0e48c642ef41", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000005708422f528913c480868f4bfde10c696aeb4679cd47c1001cb4c138a7fa89551c84cf2842719b9a2d4a44df263674b44cad4f186739f53e02c40869125f970bd39d3c1a3ed32f484c9d9da46d1f4f004fab52fffbd2f390285ef7fdb097bde7eedfa5ab71d1a2116172b80bff939ba7dd5ca9f34a01889a630dfc741ea6fc1373857eef4199f0db3aafdf34cf8b9222b71466cdfc44de4d4b94228ef1509bd6a700"/195, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000001c00000000000000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x108}}], 0x2, 0x2000, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x66, 0x80, 0xb0, 0x0, 0x3, 0x84006, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1e1, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff8}, 0x200e, 0x7f, 0x6, 0x6, 0xfc0, 0x800, 0x0, 0x0, 0x7, 0x0, 0x334d916e}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) quotactl(0x40000080000101, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = eventfd2(0x0, 0x0) socket(0x0, 0x0, 0x101) (async) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x8, r6, 0x1}) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000680)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x5}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0}) r8 = getpgrp(0xffffffffffffffff) getpid() syz_open_procfs(r8, &(0x7f00000001c0)='net/stat\x00') (async) r9 = getpgid(r8) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x40, 0x52, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x5, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xfffffff6}, r9, 0x2, 0xffffffffffffffff, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) [ 913.533365] FAT-fs (loop4): Unrecognized mount option "shorortname=winnt" or missing value 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000800000000", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3a02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000700000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win95,utf8=0,shorortname=winnt,utf8=0,utf8=1,uni_xlate=1,usefree,codepage=737,nonumtail=0,uni_xlate=1,\x00'/139], 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000002", 0x200000e4}], 0x2) 04:33:25 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002780)={0x53, 0xfffffffffffffffc, 0xb7, 0x6, @buffer={0x0, 0x39, &(0x7f0000002540)=""/57}, &(0x7f0000002580)="1d41df66ca0e63543275d6434567826e202cc58b57e46da58493848a0fc9abf320926f45cf304cd38476c333ad1dfb886dfb097b6295d73604257aa8f53e7c72d3a4d5e99bafdba2d606ae0a947fc254979ee9d7e1f81ef1721252b993ab6a88f13f86546eb51b7bc0b5bb83fece25279312d8d04a551b25a315c0d6bda325c9152f53264001a398e24b75a5aa18c68fb2e762f79f297e2abb3e54c5eac5497ab43c3f7f1083fcd0e6915446dfb372644b62995d650cca", &(0x7f0000002640)=""/248, 0x2, 0x10, 0xffffffffffffffff, &(0x7f0000002740)}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x8bc, 0x80001, 0x3, 0x8}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000f00)='S\xbb\xed\xb0\xfe%YBa\xb4u\xf0`\\w8\xdaP\xceF\f\xbb\xc2m\x1f\xb1\'\xef') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/258, 0x102}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}, {0x0}], 0x2, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b00)={'\x00', 0x1ff, 0xa0, 0x5, 0x9, 0xfffffffffffffff8}) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000e80)={0x0, 0xffffffffffffffff, 0x56, 0x2, @buffer={0x0, 0x6f, &(0x7f0000000a00)=""/111}, &(0x7f0000000d80)="5412083999794c6869c08c89d3ed7400dccec99b3aa09ebcdf179d613aefa3d6566bedee7d3d9371e006a6982ef10803d1dbad2768f7b00f41a9bf823208b20bb34ac53fd7f9caf9eaa643cfea0dd0d4696419f0ee54", &(0x7f0000000e00)=""/85, 0xfd7, 0x12, 0xffffffffffffffff, &(0x7f0000000c40)}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000a80)={{r1}, 0x3, &(0x7f0000000140)=[0x220, 0x10, 0x1], 0x1, 0x1, 0x1}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000013130000000000000000010000d50000000e000000954dee76d3b62823a158ac661109a79b7479af641edb4f6604bf156239b17124cb199d093f6d28b997fa08014ddaa627a28bc5963840b1bf3dd9fc8755ba8da01f697b8ad59011fabc11979f3e5b2abde752bc8f7f7696c74727945ce9a9b061f55e7e7c191c87dd2be5a7c8560f782cc70bde5b9ff531e0b26d3c58e7eae84bc8622b302a78692083061ddebff793c485c68ae8c24a7ac575551572dbe65914d8cfec08b303d3f373bfbf6699d8ac08d35e918b389f4356feb649c8bb4ad8c17bdba9e4bf7fe04d904ddc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r5}, 0x10) r7 = getpgid(0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r6, 0x0, 0x2, &(0x7f0000000000)=']\x00'}, 0x30) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000500)={'\x00', 0x1000, 0x26d88cab, 0x1f, 0x9, 0x3f, r7}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000580)=0x0) ptrace$getregset(0x4204, r8, 0x4, &(0x7f0000000600)={&(0x7f00000005c0)=""/64, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x48, 0x7, @scatter={0x4, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000c80)=""/202, 0xca}, {&(0x7f0000000780)}]}, &(0x7f00000002c0)="8076530ca7d2a1e05764f273fcefa03e94fa2ee873b96f2a6e0428506c41cd56858e9b3ed30c38008eea79180fae3e5a2a91afa105d7a7a55965df93acbea1ea3f9002ccf1601318", &(0x7f0000000440)=""/124, 0x8, 0x24, 0x0, &(0x7f0000000380)}) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/110, 0x6e}], 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000900000000", 0x200000e4}], 0x2) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000003", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3b02002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 913.709287] FAT-fs (loop4): Unrecognized mount option "shorortname=winnt" or missing value 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000900000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000d00000000", 0x200000e4}], 0x2) 04:33:25 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002780)={0x53, 0xfffffffffffffffc, 0xb7, 0x6, @buffer={0x0, 0x39, &(0x7f0000002540)=""/57}, &(0x7f0000002580)="1d41df66ca0e63543275d6434567826e202cc58b57e46da58493848a0fc9abf320926f45cf304cd38476c333ad1dfb886dfb097b6295d73604257aa8f53e7c72d3a4d5e99bafdba2d606ae0a947fc254979ee9d7e1f81ef1721252b993ab6a88f13f86546eb51b7bc0b5bb83fece25279312d8d04a551b25a315c0d6bda325c9152f53264001a398e24b75a5aa18c68fb2e762f79f297e2abb3e54c5eac5497ab43c3f7f1083fcd0e6915446dfb372644b62995d650cca", &(0x7f0000002640)=""/248, 0x2, 0x10, 0xffffffffffffffff, &(0x7f0000002740)}) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x8bc, 0x80001, 0x3, 0x8}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000f00)='S\xbb\xed\xb0\xfe%YBa\xb4u\xf0`\\w8\xdaP\xceF\f\xbb\xc2m\x1f\xb1\'\xef') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/258, 0x102}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}, {0x0}], 0x2, 0x0) (async) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b00)={'\x00', 0x1ff, 0xa0, 0x5, 0x9, 0xfffffffffffffff8}) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000e80)={0x0, 0xffffffffffffffff, 0x56, 0x2, @buffer={0x0, 0x6f, &(0x7f0000000a00)=""/111}, &(0x7f0000000d80)="5412083999794c6869c08c89d3ed7400dccec99b3aa09ebcdf179d613aefa3d6566bedee7d3d9371e006a6982ef10803d1dbad2768f7b00f41a9bf823208b20bb34ac53fd7f9caf9eaa643cfea0dd0d4696419f0ee54", &(0x7f0000000e00)=""/85, 0xfd7, 0x12, 0xffffffffffffffff, &(0x7f0000000c40)}) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0) (async) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000a80)={{r1}, 0x3, &(0x7f0000000140)=[0x220, 0x10, 0x1], 0x1, 0x1, 0x1}) (async) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000013130000000000000000010000d50000000e000000954dee76d3b62823a158ac661109a79b7479af641edb4f6604bf156239b17124cb199d093f6d28b997fa08014ddaa627a28bc5963840b1bf3dd9fc8755ba8da01f697b8ad59011fabc11979f3e5b2abde752bc8f7f7696c74727945ce9a9b061f55e7e7c191c87dd2be5a7c8560f782cc70bde5b9ff531e0b26d3c58e7eae84bc8622b302a78692083061ddebff793c485c68ae8c24a7ac575551572dbe65914d8cfec08b303d3f373bfbf6699d8ac08d35e918b389f4356feb649c8bb4ad8c17bdba9e4bf7fe04d904ddc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r5}, 0x10) r7 = getpgid(0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r6, 0x0, 0x2, &(0x7f0000000000)=']\x00'}, 0x30) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000500)={'\x00', 0x1000, 0x26d88cab, 0x1f, 0x9, 0x3f, r7}) (async) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000580)=0x0) ptrace$getregset(0x4204, r8, 0x4, &(0x7f0000000600)={&(0x7f00000005c0)=""/64, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x48, 0x7, @scatter={0x4, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000c80)=""/202, 0xca}, {&(0x7f0000000780)}]}, &(0x7f00000002c0)="8076530ca7d2a1e05764f273fcefa03e94fa2ee873b96f2a6e0428506c41cd56858e9b3ed30c38008eea79180fae3e5a2a91afa105d7a7a55965df93acbea1ea3f9002ccf1601318", &(0x7f0000000440)=""/124, 0x8, 0x24, 0x0, &(0x7f0000000380)}) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/110, 0x6e}], 0x1, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) 04:33:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win95,utf8=0,shorortname=winnt,utf8=0,utf8=1,uni_xlate=1,usefree,codepage=737,nonumtail=0,uni_xlate=1,\x00'/139], 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:25 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000004", 0x200000e4}], 0x2) 04:33:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3c02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000a00000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200007142d00000000", 0x200000e4}], 0x2) 04:33:25 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002780)={0x53, 0xfffffffffffffffc, 0xb7, 0x6, @buffer={0x0, 0x39, &(0x7f0000002540)=""/57}, &(0x7f0000002580)="1d41df66ca0e63543275d6434567826e202cc58b57e46da58493848a0fc9abf320926f45cf304cd38476c333ad1dfb886dfb097b6295d73604257aa8f53e7c72d3a4d5e99bafdba2d606ae0a947fc254979ee9d7e1f81ef1721252b993ab6a88f13f86546eb51b7bc0b5bb83fece25279312d8d04a551b25a315c0d6bda325c9152f53264001a398e24b75a5aa18c68fb2e762f79f297e2abb3e54c5eac5497ab43c3f7f1083fcd0e6915446dfb372644b62995d650cca", &(0x7f0000002640)=""/248, 0x2, 0x10, 0xffffffffffffffff, &(0x7f0000002740)}) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x8bc, 0x80001, 0x3, 0x8}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000f00)='S\xbb\xed\xb0\xfe%YBa\xb4u\xf0`\\w8\xdaP\xceF\f\xbb\xc2m\x1f\xb1\'\xef') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/258, 0x102}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}, {0x0}], 0x2, 0x0) (async) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b00)={'\x00', 0x1ff, 0xa0, 0x5, 0x9, 0xfffffffffffffff8}) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000e80)={0x0, 0xffffffffffffffff, 0x56, 0x2, @buffer={0x0, 0x6f, &(0x7f0000000a00)=""/111}, &(0x7f0000000d80)="5412083999794c6869c08c89d3ed7400dccec99b3aa09ebcdf179d613aefa3d6566bedee7d3d9371e006a6982ef10803d1dbad2768f7b00f41a9bf823208b20bb34ac53fd7f9caf9eaa643cfea0dd0d4696419f0ee54", &(0x7f0000000e00)=""/85, 0xfd7, 0x12, 0xffffffffffffffff, &(0x7f0000000c40)}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x10d060000) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0) (async) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000a80)={{r1}, 0x3, &(0x7f0000000140)=[0x220, 0x10, 0x1], 0x1, 0x1, 0x1}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000013130000000000000000010000d50000000e000000954dee76d3b62823a158ac661109a79b7479af641edb4f6604bf156239b17124cb199d093f6d28b997fa08014ddaa627a28bc5963840b1bf3dd9fc8755ba8da01f697b8ad59011fabc11979f3e5b2abde752bc8f7f7696c74727945ce9a9b061f55e7e7c191c87dd2be5a7c8560f782cc70bde5b9ff531e0b26d3c58e7eae84bc8622b302a78692083061ddebff793c485c68ae8c24a7ac575551572dbe65914d8cfec08b303d3f373bfbf6699d8ac08d35e918b389f4356feb649c8bb4ad8c17bdba9e4bf7fe04d904ddc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r5}, 0x10) (async) r7 = getpgid(0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r6, 0x0, 0x2, &(0x7f0000000000)=']\x00'}, 0x30) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000500)={'\x00', 0x1000, 0x26d88cab, 0x1f, 0x9, 0x3f, r7}) (async) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000580)=0x0) ptrace$getregset(0x4204, r8, 0x4, &(0x7f0000000600)={&(0x7f00000005c0)=""/64, 0x40}) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x48, 0x7, @scatter={0x4, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000c80)=""/202, 0xca}, {&(0x7f0000000780)}]}, &(0x7f00000002c0)="8076530ca7d2a1e05764f273fcefa03e94fa2ee873b96f2a6e0428506c41cd56858e9b3ed30c38008eea79180fae3e5a2a91afa105d7a7a55965df93acbea1ea3f9002ccf1601318", &(0x7f0000000440)=""/124, 0x8, 0x24, 0x0, &(0x7f0000000380)}) (async) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/110, 0x6e}], 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000005", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3d02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8000, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x80, 0x2}) open(&(0x7f0000000180)='./file1\x00', 0x800, 0x50) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002300000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000007", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3e02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000004800000000", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3b02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000008", 0x200000e4}], 0x2) 04:33:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8000, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x80, 0x2}) open(&(0x7f0000000180)='./file1\x00', 0x800, 0x50) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900000003000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4003002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3b02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000006800000000", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f3b02002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000009", 0x200000e4}], 0x2) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002060000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000006900000000", 0x200000e4}], 0x2) 04:33:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8000, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x80, 0x2}) open(&(0x7f0000000180)='./file1\x00', 0x800, 0x50) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8000, 0x2) (async) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x80, 0x2}) (async) open(&(0x7f0000000180)='./file1\x00', 0x800, 0x50) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:26 executing program 5: r0 = socket(0xa, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4004002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000000000000d", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x140440a0) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4008002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000029", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(0x0, 0x0, 0x0) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000f0ff7f00000000", 0x200000e4}], 0x2) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002067000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f40000f2000000000000067200000000000000000", 0x200000e4}], 0x2) [ 914.382817] ip6tnl0: mtu less than device minimum 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000000000002a", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000001fdc00000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000000007142d", 0x200000e4}], 0x2) 04:33:26 executing program 5: mknodat$loop(0xffffffffffffffff, 0x0, 0xc089, 0x1) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002030000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000015cd000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720fffffffb00000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000048", 0x200000e4}], 0x2) 04:33:26 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) mmap(&(0x7f0000282000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0xd70d3000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0xe}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(r3, &(0x7f00000002c0)=""/235, 0xeb, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) r5 = dup2(r3, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea9896a816fd35775560ff917de807a20172c454011969f4"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x28004) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0xe20, 0x70bd2d, 0x8, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20004044) r7 = openat(r1, &(0x7f00000005c0)='./file0\x00', 0x20683, 0x40) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) read$snapshot(r8, &(0x7f00000007c0)=""/72, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:26 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) clock_gettime(0x2, &(0x7f0000000000)) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900006000002090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000300000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720fbffffff00000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000001fdc", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xf0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8905, 0x0) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000500000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002002000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000f0ffffff7f0000", 0x200000e4}], 0x2) 04:33:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) 04:33:26 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) (async) mmap(&(0x7f0000282000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0xd70d3000) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x4) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0xe}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(r3, &(0x7f00000002c0)=""/235, 0xeb, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) r5 = dup2(r3, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea9896a816fd35775560ff917de807a20172c454011969f4"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x28004) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0xe20, 0x70bd2d, 0x8, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20004044) (async) r7 = openat(r1, &(0x7f00000005c0)='./file0\x00', 0x20683, 0x40) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (rerun: 64) read$snapshot(r8, &(0x7f00000007c0)=""/72, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002003000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000000000fffffffb", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000100", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000700000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001c40)='./file0\x00', 0x0, 0x25, 0x0) 04:33:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002004000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000002000", 0x200000e4}], 0x2) 04:33:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000900000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000000000ffffffff", 0x200000e4}], 0x2) 04:33:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) mmap(&(0x7f0000282000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0xd70d3000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x4) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0xe}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) recvfrom$inet(r3, &(0x7f00000002c0)=""/235, 0xeb, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) r5 = dup2(r3, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea9896a816fd35775560ff917de807a20172c454011969f4"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x28004) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0xe20, 0x70bd2d, 0x8, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20004044) r7 = openat(r1, &(0x7f00000005c0)='./file0\x00', 0x20683, 0x40) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) read$snapshot(r8, &(0x7f00000007c0)=""/72, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x701}, 0x14}}, 0x0) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000007ffff000", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002005000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200002000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000a00000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_regs}) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000007ffffffff000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200003000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002008000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002441500000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, 0x0) 04:33:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000001", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200004000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002022000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002009000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000002", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae09090000200d000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002082000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002032000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200005000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x2c000040) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000003", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200007000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000030090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002042000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 04:33:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000050090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000004", 0x200000e4}], 0x2) 04:33:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891f, &(0x7f0000000240)={'tunl0\x00', 0x0}) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200008000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002052000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200009000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000090090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000005", 0x200000e4}], 0x2) 04:33:27 executing program 5: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@random="68b96c898561", @link_local, @void, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9, "786b25695ebd9a"}, @lsrr={0x83, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @generic={0x0, 0x10, "fb9b596e41c12b0b12ec0883e1a0"}, @generic={0x0, 0x9, "98c5f635469bcd"}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002072000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000d000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000008", 0x200000e4}], 0x2) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000020000d0090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlate}, {@fat=@usefree}, {@fat=@discard}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x40049409, 0x0) ftruncate(r0, 0x1) write$binfmt_script(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:27 executing program 5: syz_emit_ethernet(0x316, &(0x7f00000000c0)=ANY=[], 0x0) 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002082000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200029000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000009", 0x200000e4}], 0x2) 04:33:27 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @link_local, @void, {@mpls_mc}}, 0x0) 04:33:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000020dc1f0090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720002a000000000000", 0x200000e4}], 0x2) [ 915.823571] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 04:33:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002092000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000000000000d", 0x200000e4}], 0x2) 04:33:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlate}, {@fat=@usefree}, {@fat=@discard}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x40049409, 0x0) (async) ftruncate(r0, 0x1) (async, rerun: 64) write$binfmt_script(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xce) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x26, 0x0, &(0x7f0000000100)) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200048000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000200090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000000007142d", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f40020d2000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8916, &(0x7f0000000540)={'tunl0\x00', {0x2, 0x0, @multicast1}}) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000820090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000030000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000048", 0x200000e4}], 0x2) [ 916.018216] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002882000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00') 04:33:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlate}, {@fat=@usefree}, {@fat=@discard}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x40049409, 0x0) (async) ftruncate(r0, 0x1) (async) write$binfmt_script(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae09090000201fdc0090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000050000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000068", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002300000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, 0x0, 0x6, 0x201, 0x70bd28, 0x0, {}, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @nested={0x4, 0x2}, @generic="9e"]}, 0x24}}, 0x0) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000070000000000", 0x200000e4}], 0x2) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000020090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000069", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002004000000000000067200000000000000000", 0x200000e4}], 0x2) [ 916.244826] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 916.268214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x900) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000090000000000", 0x200000e4}], 0x2) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000030090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000001fdc", 0x200000e4}], 0x2) 04:33:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000540)=""/167, 0x1a, 0xa7, 0x1}, 0x20) 04:33:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="e3ba639cb24a5362667bc1a7cd13338e83f7979aaefb64e6c3aeff7aff5f5bfc816a876bf69075ac0000f2af549de308ab6c98cc810f6ab2569d622b0a7a705a54ea4f7690342f11c7682369f854df68bd8ae271058e0e34ce320b5fe024cb8145cc72c106cb5a63578eebc20c7a5989b2b0a9b569e34a1179fc704e676a3d8d531c3b65256c3eda8449500830b880fee0f21a142d30623c5e127cb8f9d1aebbf85d4e0157c24087567e358ea2a4443b2679fd3a14015f21858194ea2b14e21c000000000000000000"], 0xce) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40049409, 0x0) sendfile(r4, r1, &(0x7f0000000180)=0x7f, 0x4) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x40049409, 0x0) copy_file_range(r6, &(0x7f0000000100)=0xda70, r7, &(0x7f0000000140)=0x2, 0x4, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '[#\xa6,}]\'#k^&&'}, {0x20, '!-[[+'}], 0xa, "9bfcf6e34338bb663d1f134cef30c041ee6701c4ddc317546ef3e971df0567e4e09b732348ee3867a0cc42ebdf13aa23154a9443cc32e159d4440ac34616990d6d889d811b4b444f56a3548ab6d8b027eb024be99b8631d94d016079e44b04388a00051cb0d58076222c9edb949accce93f90ef41b92"}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r5, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x40049409, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000008c0)={0x7, 0x7, 0x2}, &(0x7f0000000900)=0x28) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000000d0000000000", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f40020080ffff0000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000040090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000000000fffffffb", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000dc1f0000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080), 0x4) 04:33:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) (async) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="e3ba639cb24a5362667bc1a7cd13338e83f7979aaefb64e6c3aeff7aff5f5bfc816a876bf69075ac0000f2af549de308ab6c98cc810f6ab2569d622b0a7a705a54ea4f7690342f11c7682369f854df68bd8ae271058e0e34ce320b5fe024cb8145cc72c106cb5a63578eebc20c7a5989b2b0a9b569e34a1179fc704e676a3d8d531c3b65256c3eda8449500830b880fee0f21a142d30623c5e127cb8f9d1aebbf85d4e0157c24087567e358ea2a4443b2679fd3a14015f21858194ea2b14e21c000000000000000000"], 0xce) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40049409, 0x0) sendfile(r4, r1, &(0x7f0000000180)=0x7f, 0x4) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x40049409, 0x0) copy_file_range(r6, &(0x7f0000000100)=0xda70, r7, &(0x7f0000000140)=0x2, 0x4, 0x0) (async) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '[#\xa6,}]\'#k^&&'}, {0x20, '!-[[+'}], 0xa, "9bfcf6e34338bb663d1f134cef30c041ee6701c4ddc317546ef3e971df0567e4e09b732348ee3867a0cc42ebdf13aa23154a9443cc32e159d4440ac34616990d6d889d811b4b444f56a3548ab6d8b027eb024be99b8631d94d016079e44b04388a00051cb0d58076222c9edb949accce93f90ef41b92"}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r5, 0x0) (async) r8 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x40049409, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000008c0)={0x7, 0x7, 0x2}, &(0x7f0000000900)=0x28) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000000000ffffffff", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000200000000000", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000300000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000050090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0xa}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200002000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000500000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000290000000000", 0x200000e4}], 0x2) 04:33:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="e3ba639cb24a5362667bc1a7cd13338e83f7979aaefb64e6c3aeff7aff5f5bfc816a876bf69075ac0000f2af549de308ab6c98cc810f6ab2569d622b0a7a705a54ea4f7690342f11c7682369f854df68bd8ae271058e0e34ce320b5fe024cb8145cc72c106cb5a63578eebc20c7a5989b2b0a9b569e34a1179fc704e676a3d8d531c3b65256c3eda8449500830b880fee0f21a142d30623c5e127cb8f9d1aebbf85d4e0157c24087567e358ea2a4443b2679fd3a14015f21858194ea2b14e21c000000000000000000"], 0xce) (async) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40049409, 0x0) sendfile(r4, r1, &(0x7f0000000180)=0x7f, 0x4) (async) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x40049409, 0x0) copy_file_range(r6, &(0x7f0000000100)=0xda70, r7, &(0x7f0000000140)=0x2, 0x4, 0x0) (async) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '[#\xa6,}]\'#k^&&'}, {0x20, '!-[[+'}], 0xa, "9bfcf6e34338bb663d1f134cef30c041ee6701c4ddc317546ef3e971df0567e4e09b732348ee3867a0cc42ebdf13aa23154a9443cc32e159d4440ac34616990d6d889d811b4b444f56a3548ab6d8b027eb024be99b8631d94d016079e44b04388a00051cb0d58076222c9edb949accce93f90ef41b92"}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r5, 0x0) (async) r8 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x40049409, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000008c0)={0x7, 0x7, 0x2}, &(0x7f0000000900)=0x28) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000080090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x20}) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200003000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000002a0000000000", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000700000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x7, 0x0, 'crc32c\x00'}, 0x58) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000090090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000900000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000480000000000", 0x200000e4}], 0x2) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200004000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0x63, "151d647a4f0a284b8925c43ab4d863101bd2d12694a042b5a533ab05f76ec0674391b10b7a51a0af4dd7044ec0c9fd28448502187ba28fe27a0df88d17faa3c30ff5386815602f458bf211250b56d530c3bf2260187c25b3d5afa4df1486c7a7e3c200"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="9bc0c9be00892fa1d5674f371fb4478b945398acb6d25a400000000000000032494e049906b467ebdc9e1d40fe7692d585cdee0300002c51efb8fc732e4bece9ec05000000ce2b4869613f8eceefdf9dfa5f44234accf12b0eb13952050aaa8fc50d4eb5ddd133d6a7230400dc17e7eeb1ff6a93d5f596e4ef2dac5acec36602007bff7bfdd96f3e2f7221d8b0e3000000003e6f2f0000000000000000dd75fd471b5d4e387facd7b1412c08bb5b8c9e635c3ea783514fa94353e270774a4514e051d7b87d95c309f3158a4e9582e0a7ce7db1afacc38051070fb0e574f3257f0d4dac1fb64149f53036bd767e7a4483bf10b65f8965f44e4a25f23f4002680bfea9850fb27a665c0cf0a360784b05", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000a00000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000020000d0090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:28 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720001fdc0000000000", 0x200000e4}], 0x2) 04:33:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0xb, 0x6, 0x801}, 0x14}}, 0x0) 04:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200005000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720002d140700000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, &(0x7f0000000100)) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000820090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002300000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0x63, "151d647a4f0a284b8925c43ab4d863101bd2d12694a042b5a533ab05f76ec0674391b10b7a51a0af4dd7044ec0c9fd28448502187ba28fe27a0df88d17faa3c30ff5386815602f458bf211250b56d530c3bf2260187c25b3d5afa4df1486c7a7e3c200"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200008000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = epoll_create(0x8cc) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) r2 = epoll_create(0xf35) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000390f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002000003000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000002000000000", 0x200000e4}], 0x2) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200009000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000590f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private}}}}) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002001544000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0x63, "151d647a4f0a284b8925c43ab4d863101bd2d12694a042b5a533ab05f76ec0674391b10b7a51a0af4dd7044ec0c9fd28448502187ba28fe27a0df88d17faa3c30ff5386815602f458bf211250b56d530c3bf2260187c25b3d5afa4df1486c7a7e3c200"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0x63, "151d647a4f0a284b8925c43ab4d863101bd2d12694a042b5a533ab05f76ec0674391b10b7a51a0af4dd7044ec0c9fd28448502187ba28fe27a0df88d17faa3c30ff5386815602f458bf211250b56d530c3bf2260187c25b3d5afa4df1486c7a7e3c200"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="9bc0c9be00892fa1d5674f371fb4478b945398acb6d25a400000000000000032494e049906b467ebdc9e1d40fe7692d585cdee0300002c51efb8fc732e4bece9ec05000000ce2b4869613f8eceefdf9dfa5f44234accf12b0eb13952050aaa8fc50d4eb5ddd133d6a7230400dc17e7eeb1ff6a93d5f596e4ef2dac5acec36602007bff7bfdd96f3e2f7221d8b0e3000000003e6f2f0000000000000000dd75fd471b5d4e387facd7b1412c08bb5b8c9e635c3ea783514fa94353e270774a4514e051d7b87d95c309f3158a4e9582e0a7ce7db1afacc38051070fb0e574f3257f0d4dac1fb64149f53036bd767e7a4483bf10b65f8965f44e4a25f23f4002680bfea9850fb27a665c0cf0a360784b05", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES64=r3]) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720007ffff000000000", 0x200000e4}], 0x2) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000d000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000990f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002060000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000001000000", 0x200000e4}], 0x2) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000d90f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200048000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r1, &(0x7f0000000040)={r0}) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002067000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000002000000", 0x200000e4}], 0x2) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000dc1f90f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200068000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002006000002000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES64=r1]) ioctl$NBD_DO_IT(r1, 0xab03) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r4, 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(r6, &(0x7f0000000ac0)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r13, @ANYRESHEX=r10]) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r8}], {0x4, 0x2}, [{0x8, 0x4, r11}, {0x8, 0x5, r12}, {0x8, 0x3, r12}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r13}, {0x8, 0x2, r14}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r15, 0x0) getgroups(0x4, &(0x7f00000009c0)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x26, 0x400000, 0x2000020, 0xf9c2, 0x1, 0x1ff4, 0x8}}, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x8000000000000001}}, &(0x7f0000000180)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000000340)={0x18, 0x0, 0x40, {0x8001}}, &(0x7f0000000600)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000000640)={0x28, 0x0, 0x1, {{0x9, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}}}, &(0x7f0000000680)={0x60, 0xfffffffffffffffe, 0x4, {{0x1, 0xfffffffffffffff9, 0x3, 0x5, 0x31d, 0x20, 0x4, 0x1}}}, &(0x7f0000000700)={0x18, 0x0, 0x800, {0x81}}, &(0x7f0000000740)={0x18, 0x0, 0xc3, {'codepage'}}, &(0x7f0000000780)={0x20, 0xfffffffffffffffe, 0x6}, &(0x7f00000007c0)={0x78, 0x0, 0xdf, {0x8, 0x9, 0x0, {0x4, 0x5, 0x8000000000000001, 0x5, 0x3ff, 0xfff, 0x2, 0xffffffd3, 0xb288bd0a, 0x8000, 0xffffff81, r4, 0xffffffffffffffff, 0x6b6aedde, 0x1}}}, &(0x7f0000000840)={0x90, 0x0, 0x1, {0x6, 0x0, 0x0, 0x2, 0xffffffff, 0x9, {0x5, 0x4, 0xfff, 0x3, 0x7, 0xae8a, 0x9, 0x9, 0x1, 0x1000, 0x3, 0xee00, r14, 0x1f, 0x4}}}, &(0x7f0000000900)={0xb8, 0x0, 0x7, [{0x5, 0x7, 0x3, 0x5, '737'}, {0x2, 0x0, 0x6, 0x6, 'utf8=1'}, {0x1, 0x1000, 0xb, 0x4, 'nonumtail=0'}, {0x2, 0x5, 0x6, 0x540, ')+}/.!'}, {0x1, 0x2, 0x5, 0xa029, 'fuse\x00'}]}, &(0x7f0000000a00)={0xb8, 0x0, 0x5, [{{0x4, 0x3, 0xff, 0x6, 0x3, 0x80a7, {0x5, 0x8, 0x7, 0x2, 0x7, 0x100000000, 0x3, 0x1f, 0x9, 0xc000, 0x10000, r15, r16, 0x24, 0x80000000}}, {0x1, 0x6, 0xf, 0x991, 'shortname=mixed'}}]}, &(0x7f0000000ac0)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0xfffffffffffffffa, 0x1, 0x10000, 0x7, {0x6, 0xffffffffffff0001, 0x4, 0x3760, 0x1, 0x200, 0x5, 0xd56, 0xfffffff8, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x8001}}, {0x0, 0x1}}}, &(0x7f0000000b80)={0x20, 0x0, 0x0, {0xa4, 0x4, 0x6ed4, 0x18}}}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:29 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000002090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200069000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000003000000", 0x200000e4}], 0x2) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002002000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\']\x00', 0x0) 04:33:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="9bc0c9be00892fa1d5674f371fb4478b945398acb6d25a400000000000000032494e049906b467ebdc9e1d40fe7692d585cdee0300002c51efb8fc732e4bece9ec05000000ce2b4869613f8eceefdf9dfa5f44234accf12b0eb13952050aaa8fc50d4eb5ddd133d6a7230400dc17e7eeb1ff6a93d5f596e4ef2dac5acec36602007bff7bfdd96f3e2f7221d8b0e3000000003e6f2f0000000000000000dd75fd471b5d4e387facd7b1412c08bb5b8c9e635c3ea783514fa94353e270774a4514e051d7b87d95c309f3158a4e9582e0a7ce7db1afacc38051070fb0e574f3257f0d4dac1fb64149f53036bd767e7a4483bf10b65f8965f44e4a25f23f4002680bfea9850fb27a665c0cf0a360784b05", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES64=r1]) ioctl$NBD_DO_IT(r1, 0xab03) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async, rerun: 32) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r3, 0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) fchown(0xffffffffffffffff, r4, 0x0) (async, rerun: 64) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) (async, rerun: 64) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (rerun: 64) read$FUSE(r7, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r8, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async, rerun: 32) statx(r6, &(0x7f0000000ac0)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) read$FUSE(r5, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) (rerun: 64) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r13, @ANYRESHEX=r10]) (async) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r8}], {0x4, 0x2}, [{0x8, 0x4, r11}, {0x8, 0x5, r12}, {0x8, 0x3, r12}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r13}, {0x8, 0x2, r14}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r15, 0x0) (async) getgroups(0x4, &(0x7f00000009c0)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x26, 0x400000, 0x2000020, 0xf9c2, 0x1, 0x1ff4, 0x8}}, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x8000000000000001}}, &(0x7f0000000180)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000000340)={0x18, 0x0, 0x40, {0x8001}}, &(0x7f0000000600)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000000640)={0x28, 0x0, 0x1, {{0x9, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}}}, &(0x7f0000000680)={0x60, 0xfffffffffffffffe, 0x4, {{0x1, 0xfffffffffffffff9, 0x3, 0x5, 0x31d, 0x20, 0x4, 0x1}}}, &(0x7f0000000700)={0x18, 0x0, 0x800, {0x81}}, &(0x7f0000000740)={0x18, 0x0, 0xc3, {'codepage'}}, &(0x7f0000000780)={0x20, 0xfffffffffffffffe, 0x6}, &(0x7f00000007c0)={0x78, 0x0, 0xdf, {0x8, 0x9, 0x0, {0x4, 0x5, 0x8000000000000001, 0x5, 0x3ff, 0xfff, 0x2, 0xffffffd3, 0xb288bd0a, 0x8000, 0xffffff81, r4, 0xffffffffffffffff, 0x6b6aedde, 0x1}}}, &(0x7f0000000840)={0x90, 0x0, 0x1, {0x6, 0x0, 0x0, 0x2, 0xffffffff, 0x9, {0x5, 0x4, 0xfff, 0x3, 0x7, 0xae8a, 0x9, 0x9, 0x1, 0x1000, 0x3, 0xee00, r14, 0x1f, 0x4}}}, &(0x7f0000000900)={0xb8, 0x0, 0x7, [{0x5, 0x7, 0x3, 0x5, '737'}, {0x2, 0x0, 0x6, 0x6, 'utf8=1'}, {0x1, 0x1000, 0xb, 0x4, 'nonumtail=0'}, {0x2, 0x5, 0x6, 0x540, ')+}/.!'}, {0x1, 0x2, 0x5, 0xa029, 'fuse\x00'}]}, &(0x7f0000000a00)={0xb8, 0x0, 0x5, [{{0x4, 0x3, 0xff, 0x6, 0x3, 0x80a7, {0x5, 0x8, 0x7, 0x2, 0x7, 0x100000000, 0x3, 0x1f, 0x9, 0xc000, 0x10000, r15, r16, 0x24, 0x80000000}}, {0x1, 0x6, 0xf, 0x991, 'shortname=mixed'}}]}, &(0x7f0000000ac0)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0xfffffffffffffffa, 0x1, 0x10000, 0x7, {0x6, 0xffffffffffff0001, 0x4, 0x3760, 0x1, 0x200, 0x5, 0xd56, 0xfffffff8, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x8001}}, {0x0, 0x1}}}, &(0x7f0000000b80)={0x20, 0x0, 0x0, {0xa4, 0x4, 0x6ed4, 0x18}}}) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000008290f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000004000000", 0x200000e4}], 0x2) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000030000000000", 0x200000e4}], 0x2) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae0909000020001fdc90f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000005000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000050000000000", 0x200000e4}], 0x2) 04:33:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002003000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000290f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:29 executing program 5: r0 = epoll_create(0x8) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x5, &(0x7f0000000080), 0x8) 04:33:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000090000000000", 0x200000e4}], 0x2) 04:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES64=r1]) (async) ioctl$NBD_DO_IT(r1, 0xab03) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)=@getsadinfo={0x9c, 0x23, 0x400, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x85, 0x3, {{'deflate\x00'}, 0x1e8, "fd7d40755b68275355102d11d6e7e5471fd42b6ba575861b20c2e805d856af2d0314686b4fb9a8c45afaa198074f6e9a095ae087065703367873330bf7"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r3, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r4, 0x0) (async) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0xa8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', r8, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) statx(r6, &(0x7f0000000ac0)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r5, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="e203c4be0a1ada93f96efe332ba713fd51c22466fb10d0384f4d1ef0abe339334b55c8f9c109826dd268b96efc521baab5afb28b1d00d416a7e4baab4c4a159a699c7111b460af1988010de14ba3ab4c3c7b2e4f922455478a3fd765e2a0c7b25d0ffaf8f95b79da72caa6fc02ea3a75580b35dc538ecedc0982d3bdd0de3a4ec8316381257df07a047cd98bf655f27d1d36c4bf6e1d2aab7feed82c675dc4dc2b7c00549e526e8e7e616c1f070ca99c8359a954a6d32f2e5682be1b6c5f46a330b6b543f26f28d04268e4f0904c60e8fef0ed845c4d11f39826606d", @ANYRES64=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="10666f776e657235", @ANYRESDEC=r13, @ANYRESHEX=r10]) (async) stat(&(0x7f0000000e40)='./file2\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file2\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x8, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x4, r8}], {0x4, 0x2}, [{0x8, 0x4, r11}, {0x8, 0x5, r12}, {0x8, 0x3, r12}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x6, r13}, {0x8, 0x2, r14}], {0x10, 0x4}, {0x20, 0x5}}, 0xb4, 0x3) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r15, 0x0) getgroups(0x4, &(0x7f00000009c0)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x26, 0x400000, 0x2000020, 0xf9c2, 0x1, 0x1ff4, 0x8}}, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x8000000000000001}}, &(0x7f0000000180)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000000340)={0x18, 0x0, 0x40, {0x8001}}, &(0x7f0000000600)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000000640)={0x28, 0x0, 0x1, {{0x9, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}}}, &(0x7f0000000680)={0x60, 0xfffffffffffffffe, 0x4, {{0x1, 0xfffffffffffffff9, 0x3, 0x5, 0x31d, 0x20, 0x4, 0x1}}}, &(0x7f0000000700)={0x18, 0x0, 0x800, {0x81}}, &(0x7f0000000740)={0x18, 0x0, 0xc3, {'codepage'}}, &(0x7f0000000780)={0x20, 0xfffffffffffffffe, 0x6}, &(0x7f00000007c0)={0x78, 0x0, 0xdf, {0x8, 0x9, 0x0, {0x4, 0x5, 0x8000000000000001, 0x5, 0x3ff, 0xfff, 0x2, 0xffffffd3, 0xb288bd0a, 0x8000, 0xffffff81, r4, 0xffffffffffffffff, 0x6b6aedde, 0x1}}}, &(0x7f0000000840)={0x90, 0x0, 0x1, {0x6, 0x0, 0x0, 0x2, 0xffffffff, 0x9, {0x5, 0x4, 0xfff, 0x3, 0x7, 0xae8a, 0x9, 0x9, 0x1, 0x1000, 0x3, 0xee00, r14, 0x1f, 0x4}}}, &(0x7f0000000900)={0xb8, 0x0, 0x7, [{0x5, 0x7, 0x3, 0x5, '737'}, {0x2, 0x0, 0x6, 0x6, 'utf8=1'}, {0x1, 0x1000, 0xb, 0x4, 'nonumtail=0'}, {0x2, 0x5, 0x6, 0x540, ')+}/.!'}, {0x1, 0x2, 0x5, 0xa029, 'fuse\x00'}]}, &(0x7f0000000a00)={0xb8, 0x0, 0x5, [{{0x4, 0x3, 0xff, 0x6, 0x3, 0x80a7, {0x5, 0x8, 0x7, 0x2, 0x7, 0x100000000, 0x3, 0x1f, 0x9, 0xc000, 0x10000, r15, r16, 0x24, 0x80000000}}, {0x1, 0x6, 0xf, 0x991, 'shortname=mixed'}}]}, &(0x7f0000000ac0)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0xfffffffffffffffa, 0x1, 0x10000, 0x7, {0x6, 0xffffffffffff0001, 0x4, 0x3760, 0x1, 0x200, 0x5, 0xd56, 0xfffffff8, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x8001}}, {0x0, 0x1}}}, &(0x7f0000000b80)={0x20, 0x0, 0x0, {0xa4, 0x4, 0x6ed4, 0x18}}}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000007000000", 0x200000e4}], 0x2) 04:33:30 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002004000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000390f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000000d0000000000", 0x200000e4}], 0x2) 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002005000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000008000000", 0x200000e4}], 0x2) 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000dc1f0000000000", 0x200000e4}], 0x2) 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000490f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002007000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000009000000", 0x200000e4}], 0x2) 04:33:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f0000000100)) 04:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0), 0x1, 0x254, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000200000000000", 0x200000e4}], 0x2) [ 918.214529] INFO: task kworker/u4:9:21989 blocked for more than 140 seconds. [ 918.222837] Not tainted 4.19.211-syzkaller #0 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000590f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 918.271258] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002008000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000000d000000", 0x200000e4}], 0x2) 04:33:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x0, 0x0, 0x2}, 0x48) [ 918.314238] kworker/u4:9 D26280 21989 2 0x80000000 [ 918.339410] Workqueue: netns cleanup_net 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000480000000000", 0x200000e4}], 0x2) [ 918.380980] FAT-fs (loop4): bogus number of reserved sectors [ 918.387049] Call Trace: [ 918.396691] __schedule+0x887/0x2040 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002009000000000067200000000000000000", 0x200000e4}], 0x2) [ 918.430326] FAT-fs (loop4): Can't find a valid FAT filesystem [ 918.437738] ? io_schedule_timeout+0x140/0x140 [ 918.464878] ? mark_held_locks+0xf0/0xf0 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000029000000", 0x200000e4}], 0x2) [ 918.484441] schedule+0x8d/0x1b0 [ 918.499814] schedule_timeout+0x92d/0xfe0 04:33:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x7, &(0x7f0000000440)=@framed={{}, [@map_idx, @map_val]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000990f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000680000000000", 0x200000e4}], 0x2) 04:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0), 0x1, 0x254, &(0x7f00000002c0)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 918.549828] ? usleep_range+0x170/0x170 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000000002a000000", 0x200000e4}], 0x2) [ 918.586981] ? wait_for_common+0x294/0x470 [ 918.624198] ? mark_held_locks+0xa6/0xf0 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f400200200d000000000067200000000000000000", 0x200000e4}], 0x2) [ 918.646045] ? _raw_spin_unlock_irq+0x24/0x80 04:33:30 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c67f, r0}, 0x80) 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000690000000000", 0x200000e4}], 0x2) 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720000007142d000000", 0x200000e4}], 0x2) [ 918.685324] FAT-fs (loop4): bogus number of reserved sectors [ 918.688181] wait_for_common+0x29c/0x470 [ 918.721027] FAT-fs (loop4): Can't find a valid FAT filesystem 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000d90f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 918.743676] ? bit_wait_io_timeout+0x100/0x100 [ 918.768667] ? __mutex_unlock_slowpath+0xea/0x610 04:33:30 executing program 5: pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={0x0}) 04:33:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002088000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0), 0x1, 0x254, &(0x7f00000002c0)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720001fdc0000000000", 0x200000e4}], 0x2) [ 918.789129] ? wake_up_q+0xe0/0xe0 [ 918.804510] ? kthread_data+0x53/0xb0 [ 918.842068] ? check_flush_dependency+0x277/0x400 04:33:30 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000048000000", 0x200000e4}], 0x2) 04:33:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000008290f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 918.874149] flush_workqueue+0x40b/0x13e0 [ 918.878369] ? trace_hardirqs_off+0x64/0x200 [ 918.882809] ? check_flush_dependency+0x400/0x400 04:33:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x1, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002000030000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720002d140700000000", 0x200000e4}], 0x2) [ 918.944256] ? tipc_net_stop+0x15e/0x320 [ 918.954759] tipc_exit_net+0x38/0x60 [ 918.960279] ? tipc_nl_media_set+0x30/0x30 [ 918.969991] FAT-fs (loop4): bogus number of reserved sectors [ 918.984973] FAT-fs (loop4): Can't find a valid FAT filesystem 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000f0ff7f000000", 0x200000e4}], 0x2) 04:33:31 executing program 5: timer_create(0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 04:33:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f087030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000002000000000", 0x200000e4}], 0x2) 04:33:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 919.023578] ops_exit_list+0xa5/0x150 [ 919.036901] cleanup_net+0x3b4/0x8b0 [ 919.040679] ? net_drop_ns+0x90/0x90 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002000050000000067200000000000000000", 0x200000e4}], 0x2) [ 919.101502] ? check_preemption_disabled+0x10/0x280 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d140700400200200000000000006720007ffff000000000", 0x200000e4}], 0x2) 04:33:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf410dd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 919.138630] process_one_work+0x864/0x1570 [ 919.142920] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002000070000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000001fdc000000", 0x200000e4}], 0x2) [ 919.211836] worker_thread+0x64c/0x1130 04:33:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50020000050a010300000000000000000a00000108000b40000000060900010073797a300000000008000a40000000010900030073797a300000000096000c00571085e86457e38e27c784d9ddd44967c7c4f28fa082389bde2e66ca890df60fb489ccf86539bdca19eca5b324bef07752438d3e88aca41fd81861fdac234572da34fe6cd7f443d6350c1d1e8e02214869e55466da38ba289b0ceb3d8048f368462e54a1b8ac561288ee4f0e56b02e3d238b3df6f8593ecbd82771934178ab418b40c2f6423c68e834ccf30d8eff5f9e4ac90000b6000c003d766c77a3d43740ba55fd37b73264d3f9555896f58732345ebf8885511df9450a477b7346dedb2f00a060888a29b8028eb23428cec2c19ca46eccedff83382aca0733f193b4005a79293ea4b325b29b6b56ae8ad503919aa7d57155b8d5ad7279e801153133eb2d24e453abe5e2dc541ddd886df1b39e544f14cb10882b0d61d449cdd56ca8b57b8186e74832bddaffa71f7782a11b06bd6033f9918875bfce5a4dd84948a190ffc4e5ffaacfbcf79539b30000ae000c0093b91a1de0a1b474240e791857c3566b0f26b06e37b533522463c982b6eedf1457d53fbfd3ca737988fe1c934217db39fe25a199d14900e8f755f098755ae53285e2df72e8aba04a89e43a7db9b77ab4c5699740ca7d6d8a1b81415eeccdfe244f823e31310b7b655e35ed7b402fcefaad4e3565fcf7a6abf82a658b5722f148a506b1193ee2e3223475a1d922c5d36e2187a65608c47c5343693d9312beac69f97285d947fd17be1e9e00000b00070066696c746572000008000a400000000504010000000a01010000000000000000050000070900010073797a3000000000b10006008749faafa8e80a15e4991cad71bf916b77ac0dbd0efc89ecb6192dacbd0d0b945b697786d146b9aa6262e5a379360a508fe49f5dd722491eb7bd6918e75cc6239ccf1a9fa15268668a59c79cc935c733fb52c5082e9544bafaca73b5e61bb863bb0cf0a5a87431d41e173e3aa310cce362b33ee742190273aed730c27400786d8e497541d034d33401f2c0bb0c11cb53790266302ab83d1bf66c17b494f77fcde5dd0a9871273aef6d7a69cdbd000000080002400000000108000240000000000c00044000000000000000020900010073797a31000000000800024000000000343f00000e0a01"], 0x42e4}}, 0x0) [ 919.235931] ? __kthread_parkme+0x133/0x1e0 04:33:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$eJzs3MGLG1UcB/DfrtW2K+3mUAoK4kMv9TI0OXkQNEgLYkDRRlBBmLoTDRmTkAlbItLm5sGLf4cIXryIIB71sCD+CVJPe+mxB3Fkm7ZJl0WEaqP287nkB+998/IyMw/mDcz+C59/NOhVWS+fxuaJjdh8KeZxcyMasRl3zOO5K1/99NSbb7/zarvTufBGShfbl5qtlNLpp79795Mvn/l++vhbX5/+9njsNd7bv9G6vnd274n93y992K9Sv0rD0TTl6fJoNM1/GBdpp18NspReL4u8KlJ/WBWTu+2XyyL1ytF4PEv5cOfU1nhSVFXKh7M0KGZpOkrTySzlH+T9YcqyLJ3aCu5H94ubdR036rquj8+jrut1/yAeMMf/4bayqJ+IKD/d7e52F5+L9nYv+lFGEedjO36Lg3PktkV98ZXOhfPplkZcLa/dzl/b7T5yb74Z29E4Ot9c5NO9+UdjazXfiu04s8w3r8yzsz+e/PUg3zoy/1ice3Yln8V2/Px+jKKMnTj4nuX4V5spvfxa51D+5K1+AAAAAADwX5Slu47cv8+WHRrfRMSyfZFv9+LML59d/yvPBw7trx+LJ4+td+4AAADwsKhmHw/ysiwm/++iXuvoz09ePPcv+BMU91PcuWL+gSEiNmL9EzxUrHddAgAA/n6rNyEAAAAAAAAAAAAAAAAAAADAejyI14mte44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/mjwAAAP//SLzHZg==") (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000001000000", 0x200000e4}], 0x2) [ 919.270303] ? process_one_work+0x1570/0x1570 04:33:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x23}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002000090000000067200000000000000000", 0x200000e4}], 0x2) [ 919.302648] kthread+0x33f/0x460 [ 919.316234] ? kthread_park+0x180/0x180 [ 919.327873] ret_from_fork+0x24/0x30 [ 919.337766] netlink: 16160 bytes leftover after parsing attributes in process `syz-executor.5'. 04:33:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x0, 0x0, 0x0, 0x0, 0x116d11198ea02f3b, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000002000000", 0x200000e4}], 0x2) [ 919.376076] [ 919.376076] Showing all locks held in the system: 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000fffffffb000000", 0x200000e4}], 0x2) 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f40020020000d0000000067200000000000000000", 0x200000e4}], 0x2) [ 919.466366] 1 lock held by khungtaskd/1570: 04:33:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x29}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 919.497633] #0: 00000000cb37a21e (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 04:33:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x0, 0x0, 0x0, 0x103}, 0x48) 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d14070040020020000000000000672000fbffffff000000", 0x200000e4}], 0x2) 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000003000000", 0x200000e4}], 0x2) [ 919.550175] 2 locks held by kworker/1:2/3510: [ 919.588379] #0: 00000000a8e6ab40 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 04:33:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@uni_xlate}]}, 0x3, 0x238, &(0x7f0000000380)="$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") (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0xce) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f40020020dc1f0000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000f0ffffff7f00", 0x200000e4}], 0x2) 04:33:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x200001ee}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) [ 919.643850] #1: 00000000f45eb786 ((work_completion)(&m->rq)){+.+.}, at: process_one_work+0x79c/0x1570 [ 919.661227] 1 lock held by systemd-udevd/4701: 04:33:31 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000380)) 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000004000000", 0x200000e4}], 0x2) [ 919.721955] 1 lock held by in:imklog/7800: [ 919.741773] #0: 000000007a07a05f (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 04:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b044800ffffff0f4002002000200000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000001", 0x200000e4}], 0x2) [ 919.768724] sg_write: data in/out 8156/536871360 bytes for SCSI command 0xd2-- guessing data in; [ 919.768724] program syz-executor.2 not setting count and/or reply_len properly [ 919.810203] 2 locks held by kworker/1:1/8127: 04:33:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x30, 0x0}, 0x80) [ 919.822829] #0: 00000000a909cc44 ((wq_completion)"rcu_gp"){+.+.}, at: process_one_work+0x767/0x1570 04:33:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000005000000", 0x200000e4}], 0x2) 04:33:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x7ffff000}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407034002002000000000000067200000000000000000", 0x200000e4}], 0x2) 04:33:31 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0xea60}, 0x0, 0x2, 0x4}, {{0x0, 0xea60}, 0x2}], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x805) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae090900002000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff1b0448002d1407004002002000000000000067200000000000000020", 0x200000e4}], 0x2) [ 919.864084] #1: 000000008818eda7 ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 919.924156] 1 lock held by syz-executor.4/8152: [ 919.928860] #0: 0000000074275fad (rcu_preempt_state.exp_mutex){+.+.}, at: _synchronize_rcu_expedited+0x4dc/0x6f0 [ 919.949748] sg_write: data in/out 8156/2147479506 bytes for SCSI command 0xd2-- guessing data in; [ 919.949748] program syz-executor.2 not setting count and/or reply_len properly [ 919.983785] 3 locks held by kworker/u4:9/21989: [ 919.998892] #0: 000000006668cf17 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 [ 920.019040] #1: 000000007155b50a (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 [ 920.033263] #2: 00000000da4e002b (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 [ 920.041962] [ 920.049138] ============================================= [ 920.049138] [ 920.056521] NMI backtrace for cpu 1 [ 920.060188] CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 920.067632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 920.076982] Call Trace: [ 920.079576] dump_stack+0x1fc/0x2ef [ 920.083220] nmi_cpu_backtrace.cold+0x63/0xa2 [ 920.087721] ? lapic_can_unplug_cpu+0x80/0x80 [ 920.092241] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 920.097524] watchdog+0x991/0xe60 [ 920.100969] ? reset_hung_task_detector+0x30/0x30 [ 920.105807] kthread+0x33f/0x460 [ 920.109170] ? kthread_park+0x180/0x180 [ 920.113135] ret_from_fork+0x24/0x30 [ 920.117148] Sending NMI from CPU 1 to CPUs 0: [ 920.122150] NMI backtrace for cpu 0 [ 920.122156] CPU: 0 PID: 4693 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 920.122162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 920.122166] RIP: 0010:__lock_acquire+0x82/0x3ff0 [ 920.122178] Code: 25 c0 df 01 00 48 89 04 24 48 8d 84 24 98 00 00 00 48 c1 e8 03 48 89 44 24 08 48 01 d0 c7 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 40 08 00 00 00 f2 c7 40 0c f2 f2 f2 f2 c7 40 18 f3 f3 f3 f3 65 [ 920.122182] RSP: 0018:ffff8880a0e27ad8 EFLAGS: 00000082 [ 920.122190] RAX: ffffed10141c4f6e RBX: 0000000000000000 RCX: 0000000000000000 [ 920.122195] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88813be79b18 [ 920.122200] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 920.122205] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 [ 920.122210] R13: ffff8880a0e1a5c0 R14: ffff88813be79b18 R15: 0000000000000001 [ 920.122215] FS: 00007f85c5a208c0(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 920.122220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.122225] CR2: 00007f85c334e000 CR3: 00000000a100f000 CR4: 00000000003406f0 [ 920.122230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 920.122235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 920.122238] Call Trace: [ 920.122241] ? __kernel_text_address+0x9/0x30 [ 920.122245] ? unwind_get_return_address+0x51/0x90 [ 920.122249] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.122253] ? __save_stack_trace+0xaf/0x190 [ 920.122256] ? __lock_acquire+0x6de/0x3ff0 [ 920.122260] ? mark_held_locks+0xf0/0xf0 [ 920.122264] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 920.122267] ? kmem_cache_alloc+0x122/0x370 [ 920.122270] ? prepare_creds+0x39/0x510 [ 920.122274] ? do_faccessat+0x94/0x7a0 [ 920.122277] ? __lock_acquire+0x6de/0x3ff0 [ 920.122281] ? mark_held_locks+0xf0/0xf0 [ 920.122284] lock_acquire+0x170/0x3c0 [ 920.122287] ? cache_grow_end+0x46/0x170 [ 920.122291] _raw_spin_lock+0x2a/0x40 [ 920.122294] ? cache_grow_end+0x46/0x170 [ 920.122298] cache_grow_end+0x46/0x170 [ 920.122301] cache_alloc_refill+0x2f8/0x340 [ 920.122305] kmem_cache_alloc+0x346/0x370 [ 920.122308] getname_flags+0xce/0x590 [ 920.122312] user_path_at_empty+0x2a/0x50 [ 920.122315] do_faccessat+0x248/0x7a0 [ 920.122319] ? __ia32_sys_fallocate+0x140/0x140 [ 920.122323] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 920.122327] ? trace_hardirqs_off_caller+0x6e/0x210 [ 920.122330] ? do_syscall_64+0x21/0x620 [ 920.122333] do_syscall_64+0xf9/0x620 [ 920.122337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.122341] RIP: 0033:0x7f85c4cdb9c7 [ 920.122351] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 920.122355] RSP: 002b:00007fffc341b968 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 920.122364] RAX: ffffffffffffffda RBX: 00007fffc341e990 RCX: 00007f85c4cdb9c7 [ 920.122369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005638f52fe9a3 [ 920.122374] RBP: 00007fffc341bab0 R08: 00005638f52f43e5 R09: 0000000000000018 [ 920.122379] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 920.122384] R13: 0000000000000000 R14: 00005638f58c68a0 R15: 00007fffc341bfa0 [ 920.126021] Kernel panic - not syncing: hung_task: blocked tasks [ 920.439801] CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 920.447235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 920.456583] Call Trace: [ 920.459180] dump_stack+0x1fc/0x2ef [ 920.462813] panic+0x26a/0x50e [ 920.466000] ? __warn_printk+0xf3/0xf3 [ 920.469876] ? lapic_can_unplug_cpu+0x80/0x80 [ 920.474363] ? ___preempt_schedule+0x16/0x18 [ 920.478777] ? watchdog+0x991/0xe60 [ 920.482396] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 920.487834] watchdog+0x9a2/0xe60 [ 920.491272] ? reset_hung_task_detector+0x30/0x30 [ 920.496107] kthread+0x33f/0x460 [ 920.499471] ? kthread_park+0x180/0x180 [ 920.503440] ret_from_fork+0x24/0x30 [ 920.507575] Kernel Offset: disabled [ 920.511217] Rebooting in 86400 seconds..