000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000110000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xe03f0300, 0x0, 0x0) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xeffdffff, 0x0, 0x0) 16:27:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc03e000000000000) 16:27:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000002810000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:02 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0xe03f030000000000) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000120000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 2: prlimit64(0x0, 0x5, &(0x7f0000000200)={0x87, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9f02}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4f69, &(0x7f0000000300)={0x0, 0x4a79, 0x0, 0x0, 0x200000}, &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x1000)=nil, 0x1000, 0x1, 0x1, {0x0, r11}}, 0x2c37) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xf5ffffff, 0x0, 0x0) 16:27:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xe03f030000000000) 16:27:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000d860000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xff8f0000, 0x0, 0x0) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000220000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000001ff0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000250000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xfffffdef, 0x0, 0x0) 16:27:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xeffdffff00000000) 16:27:02 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0xe0ffffff00000000) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x8000000) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x8100}, 0x7b80a9767f7d81e2}, 0xa12) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x0) 16:27:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000005ff0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000002e0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xfffffe00, 0x0, 0x0) 16:27:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000320000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xffffff7f, 0x0, 0x0) 16:27:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xffffff7f00000000) 16:27:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000480000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000fff0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xfffffff5, 0x0, 0x0) 16:27:02 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0xf5ffffff00000000) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000004c0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xffffffff00000000) 16:27:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000200000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x2000000000000, 0x0, 0x0) 16:27:03 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0xffffff7f00000000) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:03 executing program 2: r0 = gettid() tkill(r0, 0x34) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x50, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r5, 0x0, &(0x7f0000000000)="88ae7003ca05e6c7611dd84e16f7cb0349878278c39350b313a1b0cb2440c79acc919f094773c1fb357ddd34a6fc622c39", 0x31, 0x4000}, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) sendfile(r8, r6, &(0x7f0000000200)=0xa6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 16:27:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000017e80700000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x4000000000000, 0x0, 0x0) 16:27:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0)={0x0, 0x5707}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) capget(&(0x7f0000000000)={0x20080522, r3}, &(0x7f0000000080)={0x7, 0x0, 0x0, 0xffffafa2, 0x7}) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x34) sched_setattr(r6, &(0x7f0000000180)={0x38, 0x1, 0x70, 0x4, 0x2, 0x6, 0x7fffffff, 0x3, 0x4, 0x6}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r7 = signalfd(r4, &(0x7f0000000200)={[0x3f]}, 0x8) recvmmsg(r7, &(0x7f0000002b40)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)}, {&(0x7f00000003c0)=""/65, 0x41}], 0x2}, 0x3ff}, {{&(0x7f0000000480)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/6, 0x6}], 0x1, &(0x7f0000000680)=""/214, 0xd6}, 0x4}, {{&(0x7f0000000580)=@tipc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/153, 0x99}, {&(0x7f0000000600)=""/32, 0x20}, {&(0x7f00000009c0)=""/100, 0x64}, {&(0x7f0000000a40)=""/4, 0x4}, {&(0x7f0000000a80)=""/48, 0x30}], 0x7, &(0x7f0000000b40)=""/230, 0xe6}, 0x1ff}, {{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000cc0)=""/172, 0xac}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/153, 0x99}, {&(0x7f0000001e40)=""/254, 0xfe}, {&(0x7f0000001f40)=""/253, 0xfd}, {&(0x7f0000002040)=""/226, 0xe2}, {&(0x7f0000002140)=""/208, 0xd0}, {&(0x7f0000002240)=""/112, 0x70}], 0x8, &(0x7f0000002340)=""/86, 0x56}}, {{&(0x7f00000023c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/94, 0x5e}], 0x1, &(0x7f0000002500)=""/51, 0x33}, 0x6}, {{&(0x7f0000002540)=@hci, 0x80, &(0x7f00000028c0)=[{&(0x7f00000025c0)=""/224, 0xe0}, {&(0x7f00000026c0)=""/145, 0x91}, {&(0x7f0000002780)=""/48, 0x30}, {&(0x7f00000027c0)=""/199, 0xc7}], 0x4, &(0x7f0000002900)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/139, 0x8b}, {&(0x7f0000002ac0)=""/1, 0x1}], 0x2}, 0x1f7}], 0x7, 0x0, &(0x7f0000002d00)={0x0, 0x989680}) shutdown(r4, 0x1) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000600000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x74e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000680000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000008000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) getrlimit(0x3, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(r3, 0x3c) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x120) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r10 = fcntl$dupfd(r4, 0x406, r9) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r10, 0x0) getrlimit(0x0, &(0x7f0000000080)) 16:27:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x30000000000000, 0x0, 0x0) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000006c0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:03 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0xffffffff00000000) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x110, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000000), 0x1, 0x1}, 0x0) 16:27:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000001000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x40030000000000, 0x0, 0x0) 16:27:03 executing program 4: r0 = open(&(0x7f00000012c0)='./file0\x00', 0xa82, 0x1) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000001440)="fa12ec929a1419ffa5fe29452dacf3dfd570b32ec9c042babe7cd9bc61ff3458eb823d006d5c8e666e4ddbf19948caae973256f0990c2a38e34d2f64192b8b1e8f5b1a5d02f24c444aa6ca6ede2a6367bb8f3e8826862a3564cd1f8f4eff9236272fc21aad9e803df82bc5ab0cdf48862eed", 0x72, 0x0, 0x0, {0x0, r5}}, 0xec) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000001100)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/211, 0xd3}, 0x1}, {{&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/104, 0x68}], 0x1, &(0x7f00000004c0)=""/223, 0xdf}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/146, 0x92}, {&(0x7f00000005c0)=""/108, 0x6c}], 0x4, &(0x7f0000000940)=""/7, 0x7}, 0x7}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/255, 0xff}, {&(0x7f0000000c40)=""/70, 0x46}], 0x4, &(0x7f0000000d00)=""/130, 0x82}, 0xffffffff}, {{&(0x7f0000000dc0)=@ax25={{0x3, @null}, [@rose, @remote, @default, @bcast, @remote, @bcast, @null, @netrom]}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e40)=""/252, 0xfc}, {&(0x7f0000000f40)=""/214, 0xd6}], 0x2, &(0x7f0000001080)=""/82, 0x52}, 0xfffffff9}], 0x5, 0x2000, &(0x7f0000001280)={r7, r8+60000000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) mount$9p_fd(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000,loose,debug=0x0000000000000007,posixacl,cache=fscache,access=user,smackfshat=\x00,uid>', @ANYRESDEC=0x0, @ANYBLOB=',\b']) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r10, 0x0, 0x0, 0x0) io_uring_enter(r10, 0x2004f96, 0xe41b, 0x3, 0x0, 0x0) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000740000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000007a0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x4, 0x40010, 0xffffffffffffffff, 0x10000000) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000002000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000007e0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xfeffff00000000, 0x0, 0x0) 16:27:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000402000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x100000000000000, 0x0, 0x0) 16:27:04 executing program 4: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x0, @initdev}}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x80, 0x7, 0xfffffffc, 0x80000001, 0xfffffeff}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000008e0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000003000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:04 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r8}}, 0x8b) shutdown(0xffffffffffffffff, 0x1) 16:27:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000003ec0)={0x101, 0xcb7}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003e40)=0x0) sched_setattr(r5, &(0x7f0000003e80)={0x38, 0x5, 0x20, 0x4, 0x7, 0x7fffffff, 0xde, 0x4, 0xc98d, 0x8001}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5f1943150884bec7cb227f830a864a13a5684948d3830bd5d2f550d4486d4f1792e7427e044672573fdef0dec4260dfdcc2fa14fd39db190207496e0f03ffb2fa085fd75954ff559583a419c5e4e1cfda5ec15f7ab4e5cf8c876ba843c373097873e4ab0173cac7c75a38e19aa6ca3e600e6ce5f7e7f9022a65e7bce3134dbf024afe88bd83d1e3bce671672733868cae396d50a938a7561fb4f4073dd", 0x9d}, {&(0x7f0000000400)="e88e97fa24942d46bc59fd36cbfa851cdfdb67cce26e8b44d75c96d56ef1be3ae1c63d7c91adcfe1e920e057dfd67dda3d8c716a767740bcca9f7e113aa2414eb3e7f1a4bafc853d822b9de7bac55f689f293bad3ff5b28ab32ce103d13f671b7b669cac5f6a687c2b6ae734e6eb584c7d35add87666bca436f2d4f6f4a5975b0e41d2baa8acc81c1d1d464d79a4c988ccf8d08a49e59e21dc02b4c1b88810560e0cd9d4d0a0cda168a8844dce01403672158a265d1da5594d734f7f205605d726d0fe3868d7a4d208ed305bce7c95418ee8b5cae930553d868d19241d6a559584575bd2e51a72df73ff809ef552e1", 0xef}, {&(0x7f0000000500)="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", 0xfe}], 0x3, &(0x7f0000000680)=[{0xf0, 0x10d, 0x1, "f081821e9c738d8e54c56b9dff7e8d63f49e5e8ba1a7eb1e29b219001f5cec23f97d1db0251fb7e6aa1744cc484e8b433837e08025e5563a5a68cf50fb58f0c42949f2383cf3f8b2ccbf92218dc068a638d3b88af1950db76c79aa59d2d0cdefb601bb676d6ad9dec79601395e3c341dffb45583205c8f40c621bf498fa1ef189f5613587027d3a7d2d97998c670251d3e595ec18609ee93fd31440048e9e7b3e57a2538e984e54f370689002e4e69a0f77fbe2c30e674f285592bc93113612bb5d5b052ab4c35354995ce0854f6fdd2953d1cd5fd8ea2f867c01b6450c3"}, {0x1010, 0x10b, 0xfffffffb, "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"}], 0x1100}}, {{&(0x7f0000000200)=@isdn={0x22, 0x1, 0x4, 0xd, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001780)="6eb6a41ae60640cd725dbf8b696a83261b6d376aa8f6afdd25646870d75a9626fe84aeba3ab5c231b9de3fad34f94ea771955796554883f983ee17d590adb727297b7d20326afa77553834ffc2fa129f9983305d281734465aec30c8f269cc684ca258bb2784f5beee60c7c8232de1e22d0d29f6007fa8ed40fc61fd47717b6fea548686c911fc86438bf7d4c12bd7918fe0a0835ef2ceb3caa9fb1c411abd6df80dadd925fdfec87161ffd0e168d5d1db8c8fe5e1aa6ff9ee466f6095e97e7e51396af8e428bf42910804a640e1540c014088", 0xd3}, {&(0x7f0000001880)="b82da1b818a04602c7e11efd3bf4b3dc254c55407ecc7811be51d4d9cde5110d402f2919b48e2fe7cfd0ffb92bfd23709483eaac73e76b080ae003870447739e83f4a0d0c8e227fe55311343e853ee85648072d219ed95ec275ee515142faa37d560f7455b99700c1412129b9e12c310238391467eb4a1cea108cd06ac164fba3279269586e8a09b028f5d4c2fa3677dac7cd02c69d23bb11b", 0x99}], 0x2, &(0x7f0000001940)=[{0xe8, 0x102, 0x800, "130811fe34cdd9b9a2360ed74275caff6f1b828a7389937ba92ffacb4e4ec4ed9fb78d6edd3160435a30f5cd9e922e2da29cc368d3d16e3370f7de1f60913fd22fec9307ed2b7537df11bd2b7c11359c72e01347875c6d8377cd3158b5c270c99dd9ee2ac0f920bbabc57d74755f9c842bbb74e1a717efe35342d6cc3db64a8af8acf856a053026ec480907cad1d0def9e384805ff20ad70de8bcdf905525d258d6fb6b3724a4aeaa2fc26de6225da3847ae1c039860ed204783927b2fba2d8554da0cced99d60d36b69ddaeaf4646445705"}, {0x1010, 0x113, 0x80000000, "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"}], 0x10f8}}, {{&(0x7f0000002a40)=@ipx={0x4, 0x2, 0x80000001, "f49bdb20223a", 0xe5}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000000180)="288b156a0264606e1a03973f87e16a5bbe0871b78efb02d46c25ca9c035c720878ce1843ba562e3341ea2e1deec445221799e66a154a", 0x36}, {&(0x7f0000000600)="ae009fde00431809f2f08efd877920eae45f", 0x12}, {&(0x7f0000002ac0)="a77d56f15d9e560a52ac9f06a258b9f049dcf4d10f8a8159947fc2e5b5b4f86e5c5d9e468d261785d93620f726fe66be68f04ad5270fa1e4", 0x38}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="f103f661270dadb9e2c413bb254266069cf1e5ed24202f4991e6092d28db733f578a5d67bbb877ed97cac2caf07068481aa1169f1c6c740eef5f57b0e1afe065e859f76552cd46970b5cd6b5f2d6368f23641cf851be44d5b1d6084962352bdccee09ab9", 0x64}, {&(0x7f0000003b80)="92bc30949ac84d3162c057c23544d18fd2bbd761d422895f48bffd2751c00170c8b741d578b76092a06ad27f7927ee643dec70ed439ef06521615675edca8624c1b7203450a35f045b24bf0458d2d5702210dca81cba4c604b995cf1b85e68a687c9dd8479e98749b3604c40d7cb37d8ea6227607884338f72221fdac4c2124c17323ccb66ed56202d2db34173a62c996f200e6cfa56c1eb3848d8ed18fb450420ac830ba72f453ea23118f13fdfb36f80a929ac25bddd0696480f3ee98462ca6b19fe0958a6ef5d3ea0d195f9e020f47e3d1d39ff734167d5adb54444f410108f8aa2cc", 0xe4}, {&(0x7f0000003c80)="100e7d1a3f0ba37ec5faf6c1135b8324ab20a6f2c17fecaa0116d6cc555f3568fa9e20de6ca7f6487169a82037f5c0a7f9d0ffd1ae20609bb4c93c28e12c07aaa6b8fe8ce2b3ffbebdb948391e0b3b02bd18eac49b17", 0x56}], 0x7}}], 0x3, 0x4000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x200000000000000, 0x0, 0x0) 16:27:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000008f0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000900000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:04 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x57b7, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4000, @fd_index=0x8, 0x4, &(0x7f0000000180)=""/153, 0x99, 0xc}, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_io_uring_complete(r1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req={0xb5, 0x3, 0x785, 0x8001}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r3, &(0x7f0000000000)={0x0, 0x2, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000004000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x400000000000000, 0x0, 0x0) 16:27:04 executing program 4: r0 = syz_io_uring_setup(0x587, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000910000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000005000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00003af000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="0f8c7eccd5b1da2ef4cd369f43bcfe56e19d1368bcfc1c3efe2014ba56dde6569ddb0c3397714050bb6c8b84295a0b222767110bbd548983443894048b4f30f19cb4d7e43338fef747c785b171be68ecd945e3fce92b932f02baabac86fdd6aa7c69bfa63440ce9f3e95625003b42a1c012671ac12600b15cf12a719e10542a5", 0x80}, {&(0x7f0000000680)="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", 0x1000}], 0x2, &(0x7f0000000340)=[{0x110, 0x111, 0x72, "ed7f29469f2bf1a798d11be65937696a5a8bfdd2855ae4e1812f0399c93674580c7c72a1763cd2a675232e26b9c5863cc1823affc7d1895b06015ffe1813dcf0367e9135e9285efaad7b85f536987d34a6351adff4a9673219c48e60f5a8da3d95d110ad9d9aa2ad813a9f098f7f4b38af4b5e1c89639b991ab4718be2863a773a4e44f2994cbfbba1d9bbc191843972bdd39a1c00551c59ef6f1fbfe98bcaeecf9234c741dd1d819f861cf563c582424630a1488eb4d9a4067fe8ab98ca8fdc4da852f99141ecaf9b5d53e2c6a93accd73a38b8307149ded9a57888ebb637d0a74a1b0c48518ebfbd7ef9db79339cc17948c6c429bb84e791da6a"}, {0x90, 0x18a, 0x0, "ca34735d6c92dff2a4e4548583c902072d32564411b5465f47d290214ce1321272a041f13cd5f50e75267279b9170429262247b6b6c12feb3ab07cdffb0d9614dc982fe81531a114234f896342f99171741fd9f8d5adad2bd9cc25280493723551f99c791a92f9aa6e81d7d8edc5bc67ec63c86771030df8cd07"}], 0x1a0}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x100) 16:27:05 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x6}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x1c33, 0x2, 0x2, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000006000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x600000000000000, 0x0, 0x0) 16:27:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000920000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) setrlimit(0xa, &(0x7f0000000000)={0x8, 0x1}) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000180)="e51a9a72f38824dc4bb2b99ff23dcb634ee5ecccdcafad93c1a7ff4c608287461250fb17f5ee0610a8df7c7603b7de0394f7262c09e7d33238f6748d486f9af12c59a3162138fc0d2fb5a1f6e6d5f67ef794d2dcdbe7d94e076508a23a7ecab2c4281ebe4c329a486b9ef06305e0b35aa7f142573d5522be22586c724fd447ed18f92b0f45f8d40060f0058e0992025bc27587412349adf56a6fbc7a63fcccff1dab7e30918fac08d0bef23b07cb41ce6b3eef5664a02092affe91b34cf9296e9dc72f428d68fece6721d241cf31ab5a45df910d0921912fed5e15c6644e", 0xde, 0x10, 0x0, {0x0, r7}}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:05 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) write$binfmt_elf32(r5, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0xe1, 0x0, 0xbc, 0x84, 0xfffffffffffffff8, 0x3, 0x0, 0x401, 0x3d7, 0x38, 0x19, 0x200, 0x6, 0x20, 0x1, 0x0, 0x8, 0x6a}, [{0x1, 0x8, 0xf6, 0x400, 0x5, 0x8, 0x8, 0x1}, {0x1, 0x10001, 0x7, 0x0, 0xa0c, 0x5, 0x8, 0x800}], "a307980f18c17ab962885795f98900216ab9ff55ee2587435f331ff59ca09bdbef1065602435c40ab23944e519410ca2f2148a644bcc55f0bb015aff4de1bd858c35a1a25ed77f543c65a60f48d96029faffe997aa346987757b5eaf30ee8ddd93905ac57b43ae672c156344432d3e6e3570491c59bfc238da4b51a21549b3e4f58c81a3d04951e128b245d18ed5dc01c7d649efa0aefbea88a2bedca9fba37a49801396d1e76893cbf2473871e199419f509b2570498f437609845c4eb2e40c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x838) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000a80000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000406000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x700000000000000, 0x0, 0x0) 16:27:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) syz_io_uring_setup(0x5480, &(0x7f0000000180)={0x0, 0xd8dc, 0x0, 0x1, 0x80003d3, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r8 = eventfd(0x6) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000380)={0x0, 0x8, 0xfffffffffffffffe}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35, 0x0, 0x1}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd=r3, 0xffffffff, &(0x7f0000000680)=""/4096, 0x1000, 0x1d, 0x1}, 0x101) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x30, r0, 0x8000000) syz_io_uring_submit(r9, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x1000, 0x0, 0x3, 0x0, 0x1}, 0xd43) 16:27:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000a90000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x800000000000000, 0x0, 0x0) 16:27:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000007000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000aa0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000008000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xf00000000000000, 0x0, 0x0) 16:27:06 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) getrlimit(0x1, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x4010, r4, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000800)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000780)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'bond_slave_0\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd_index=0x6, 0x8, &(0x7f0000000680)=[{&(0x7f0000000180)="131b3ab53149f571fc9ba630730ecfa9d1e0d6132b91431f77a800971829eb3822b583b81a280d6fd3c42ee1bf9bf25f2a9d759e792866c82c7eb94f21ceb9b9b31fb35697f793f1d78dac76f8f7e2b87238177055aed8b7528518e736c34c4891f96079c6980bdeeed1d21882bd9700d3d5ee4987beae5054344834644f282600821eb189c6508888930107de484640b72da21d8c8650afbb5fbfbdbb41d4dca9f7e1e24779f3681995b812e3cdb9db519a1965e8588b5d99d4345591ab656eea3f48779b12895229673b6c41adfc7e2570504a94e769", 0xd7}, {&(0x7f0000000340)="81d89700350cd5f1f9985d924f5d8dc5e61cec17743983dc81e8010b3f51fbf0abbb336ac08534d9b247105f44aeb4f51c8983b17da2ca0aff114b1098491110a91edb95908d43a045ab6fb12d206543f3a1ab8b3f9e8793d808deda85d5eba7a48a14ff44d446a2ffee5fd6ff52d280ef81d3643ee58fb328631568f9c49792e4be731972f049de95a065abb927b7ca9f00fb2b1ce6aa47e19e47338213ea", 0x9f}, {&(0x7f0000000000)="e1132e62b3e2c6680bb82a7cd11a15389981c0b1509907785538d6766b51e78d701875", 0x23}, {&(0x7f0000000080)="c4827f6df3c871836b0d2508f8cbe3e79f", 0x11}, {&(0x7f0000000400)="39e698504c7f0f8a5d91145fe22a58b185ca67d38ff190d6875e85d66c6402c2a27426", 0x23}, {&(0x7f0000000440)="eb9dc64941b87bd449d3585e8bfb4d5a846df83f35c63f5ffc4288911ca41255f8c4641791a94937ddb5d1e82e27fe9920f872dfdcb2704e61bc9c4b1ca8a8e533182be20f4682a3213255fa74344055714fda8e2a26a82d99455cd7ffb8c0c36061c1a58c123e45a9b33372eee64d8b16c413aaca0882e17d78b4d584d0e54b31683b5200c96959ad0adaf6603dc357cd43c243d020f1c132a8cb30cfb762b829e6633e9b2efffbc655a356d8184712bed473580028803f91728157fa8a6a3606523a74d104ef9f70e82aae0417c8df8552d0e76657", 0xd6}, {&(0x7f0000000540)="5725454d8a6ba2d0725189c543606608520127b86b68cf3ca78a316602a969e80701d9feaf08f441b8fc88e0a387f52a", 0x30}, {&(0x7f0000000580)="0727ee041e32de7d76e4d6075a998314bd4ab9099c5949a13616a986d8efaba226d5b6f523b19fb6b2ab0f", 0x2b}, {&(0x7f00000005c0)="126abc637d904485665d1f24290c61ea0ec6b25815e993309650535f90178b8a0e619af60cd756a75bb07f23bf05bfe8a3e99ce6d5addad49b44820efa4050e9052e629aa281f5d74a47847c4f9340c12768caa05969fcaf0a055dffdbb46a4554eb06095b9fed5d", 0x68}], 0x9, 0x10, 0x0, {0x2, r7}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) bind$unix(r3, &(0x7f0000000840)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ab0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000408000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ac0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000009000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sched_setattr(r5, &(0x7f0000000000)={0x38, 0x0, 0x10000019, 0x9, 0x1, 0x7f, 0x4, 0x101, 0x1, 0x7f}, 0x0) r7 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0xb8, 0x4, 0x0, {0x0, r11, r7}}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) shutdown(r6, 0x1) 16:27:06 executing program 4: r0 = syz_io_uring_setup(0x518e, &(0x7f00000002c0)={0x0, 0x1a79}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) socketpair(0x3, 0x800, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0xa53, 0x1, 0x1e, 0x4}, {0x96d9, 0x0, 0x20, 0x4}, {0x2, 0x6, 0x4, 0x5}]}, 0x10) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5dd3, 0x1d79, 0x2, &(0x7f00000001c0)={[0x24b19247]}, 0x8) r7 = dup2(r6, r0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r9, 0x0, 0x8, &(0x7f0000003d40)=ANY=[], 0x1) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r10, 0x2f, 0x7, 0xfa, 0x20, 0x3c, @local, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40, 0x10, 0x1f, 0x2}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x0) 16:27:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x1100000000000000, 0x0, 0x0) 16:27:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ad0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002f40)=[{{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2, &(0x7f00000004c0)=""/29, 0x1d}, 0x1}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)=""/189, 0xbd}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000001680)=""/27, 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001740)=""/102, 0x66}], 0x1, &(0x7f0000001800)=""/54, 0x36}, 0x5437}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/244, 0xf4}], 0x1, &(0x7f0000001980)=""/62, 0x3e}, 0x3}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000019c0)=""/46, 0x2e}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/244, 0xf4}, {&(0x7f0000001bc0)=""/253, 0xfd}, {&(0x7f0000001cc0)=""/5, 0x5}, {&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002e40)=""/248, 0xf8}, 0x401}], 0x5, 0x20, 0x0) fallocate(r5, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fcntl$setstatus(r7, 0x4, 0x40800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ae0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:06 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000c000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x2000000000000000, 0x0, 0x0) 16:27:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000af0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000fe0000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000d000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x8000000000000000, 0x0, 0x0) 16:27:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) truncate(&(0x7f0000000000)='./file0\x00', 0x5) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000002e0100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000e000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x803e000000000000, 0x0, 0x0) 16:27:07 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) getrlimit(0x2, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0xffffffffffffffdc, 0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r5 = dup3(r0, r3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100)=r6, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000600100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000010000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x40000, 0x12345}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000610100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000620100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000011000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xc000000000000000, 0x0, 0x0) 16:27:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x1, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x237}, &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="49579f73ec816681833a116e464e76ac01cdea47fc6bdfef6b77693913e5cfc43221983c3ba1ee73f82ab1341a056c820cee1e7e808d5e40945662a6503ef6e075c5b7b038c32582afe854da57fb", 0x4e}, {&(0x7f0000000400)="b7075d21ae746742277e31ce416b41f5ba75e57f275526422b8b2427696ee69a48971cf02bdcc659d2532fe4d0ecea8ca6fef1f3d606b75872822019a6ae9248d89bd19b500a83df573e0d278c684624964561117ed058a4beda1bd7bcf414d85271eff2a2d6fdbddb0a61a24dea94cb7295d4280a52db78c99b8dc6403d1f088f3b1a5a8ad9edc2b85c11a4a90acf793257633b769fcb4c10972e0587c05efae9281f6740bce9fa", 0xa8}], 0x2}, 0x0, 0x20004044}, 0x3) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r12, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r12, 0x0, 0x0, 0x40, 0x2, 0x0, {0x0, 0x0, r13}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x5ba3b3d10b24af9}, r12, 0x1, 0x0, 0x1, {0x0, r14}}, 0xfff) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000630100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000012000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xc03e000000000000, 0x0, 0x0) 16:27:08 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x3, &(0x7f0000000680)="b490e9f826f3aa18a641aebfa2f39e35b71eb8312957a7302dee89743d821ed4033e44eb718c15aa3dc370f55a33f0fbf891f77783a720fa72f6222a1b16748f54f52f6f19343b86947105f2dc45815f0110edeb690191c9416d93a4b8fda2db7fac158f7ddd885013a18764e3b787fac30fddc466509989e4f8863fc01ed99661dc9c76a21acf460e7a8308c89877432b9c86917d543dd41d82455b62a55059a89c4b7cd1432ff104fb5e5d592b312576b84ef510cc4b8caf57506ec88a228be541e9a27fe3b2ecab45a7b02684d96a998f2cf781c5c9932d86ec319b79f8803b6675eed30bb47bb5163fccc621b1688ae31ddeedbfdda36dc326de23a0cb21a82e4d1a2b27ae87d826387bd02bb25018d8b852670d8df2afc331d99c684d7188e602881d13e34d2e1ee25f7af5da90572458ea9a04d5ed450e5ec1ffdd12483a05b883dfcacbb63fd408a1fa74bb336970cdeb632e0d8df78364a7c8da035d6963b23ad5fdcc045e16959df693756b760c7355cc9de5178b2efc123ed17a3f56d5b486ce35cacbe14834fdde8c6bea2e8fe224370015b96e2ee1c4c5b19294f97bf0c0136b47232e055d1ccf3bf4a43e3f270c79e50c07f658a0d95e37417d06de8667a8284741c18b51e63b6b78223764c741df7d488cb29aded6d957c85b403f63b16b2f9c409080c6bb7c0f86c846322269d46d713cec9108e979b186fb6f317e3d28ac84edf770acc195371cd4f765de6b9af53bb7f4e75f485c10130c610aedfb0f0c1d955f53ff6a3ec6410d9638c32dc7d212495437bf8161f92ae3573af6091e866a3bf375be974af90610c713c59e3cac2d0d70934f0e111e016fc45369f3de0e46b3cfa643069b670fba7b2294db917d2efaf3e88ad320156879aabaf8e4e1e24723dafb2356462ecd72d14d4c382eef2f3dc203725013531bc0df5dfffb587286aa2b7320be0a471194a5e76659c1a4348890c1aa161a7116745053cea5ea023620a87ebd8390e531048de3a3ecb841b22c3a47ca12051401daffd3db695cafc3570736a3a76f519af4f7c6d1e005a904bac3d6db2961cc682e6591aff3ad035e76384bee6115aad7fdb4bd278e097439334547de754bb8c30116e0075e4e4ce1e7fc9c9885cd357aac9b8e026fc1d99f4b1b4b849be337477c730b2797397b4dc760940386a21361b4c77519e3c8fb2ad7fe1953e238161aae3f142ef0c6ea340533a80f2039c36f1a487ca5d1016c00f577007fdf6ee9d897a07eabb2ef75ca5c18d64804c8fba5c09d03a592e9b7cf8c3139bd23345977077789d02c02faa66f11caa56cc4cf868530ad48632966007e2d8f1be9980da47bf757213c578ea9939f265ea1a990dd8d81c3a89b42d019c14ea591fb540a2588d9416a7222830c93746f44a89e70fe2f69e1f7126971683285e8fb695901e6946fe886e44c4ccc32c021f3aa655671a76e8d9e28d9b90a55ced8254c985628dddc3a25cfb651b5fabe962e19e0c3dafa66dd21e7dc97d99482da7371dd9590baebfe3f6d9e5d1930cbe10701aa69ff8daf9575fb04aab83a58687e7d38290ed1e645b242904de92147aadbe91954eb11141e80c9e601a229ec92f16b304ccfd1253678b5dd1e015f48766bbda6aff66fcf64ab728401bf1f93d857aafef3defdfb940dc41953f2c301efd0081c3b693e1a3c280dd82f07160261d8b68bc63f4bd899a126717019cf247195b750a7c71f9d8c33b3b985889c7c29fa7fb61209874779a88a7d89f3f4bd71fbd72a217df6d62679986251c0ce97e6bf58fbb930de8c69dc5085f01b94a6a6a605b16a958b7bd641488980d55df36a370e1c7bcac1fa3d32882a0fd9b3d48b5bb531ca5bb5c18026dd10687def4288a9342ee19dd9cd41467d96a0eee0cb2682e2c3778a8880bddf4416a318dd07a70b68cd1398651f5e8922fe6220f08547ca93280f26c28e0dd4bcb6c9802e69251f26a1dc5501f11c7cce16c7e99ec58418bea0abf96a5f27a53a8e7d691cabcd124ef4ed2c697bf6fbe4eed2c91fb4975efabd60a8a6721578d5c0432af0dd55d1081e36e9a953492deef80d353abf1281127afae187c87e6aa293726590d0a35104a0293f689e483e222884e2a172c42ec27a5cd2a78bed0c91414d16242d7a943030a128f480a7527c9308c1d2993c538427823e608bd5cc06b6866f4924c18f3f1255e68de39c1299d632147483520be09ef9084b85a3d8745944d128586587b0c0565335f72cf248611cfcf15e863147a42d1107bbc554b0eeffd274c9c68fdbe3aa0bfa7007a12b91e3d5d8fefb5270bf3fbb07f3bd8662dc08b8eec8aa9363ea50ed03fcb3dd8a0e6cc43ec5983f00ea7cd7bbdf13035966f05c6b7939f6f5543166e5699e954498a8ae35feb3cebdb8f47bdbfff0f2008fa60c228732149724cb318eec25570823a965729bb83eeb5c0a48fdc8d31213f09a3622cdb17db25f49cb07be403448c194d2ae073b61f7b496990ecc49bbc223e8a47579ca6e2cb65959ce3b98b125e434101814fe83b16b9adf4330a8b42bac9a1fc43371f3de4b66cd17fa2dfc3d76d05693bab979e0e6d97584191750cc1f5fcf909d7dd1c2f3a88150c52d2e55fe4c398f9a543db1d23d4d295b71c5549a21eb93d81edf2c01d50c9e709716daa10993791a70cc4045793586d0b24f2aac6640c84235096eec8900b5442546b171b6bc8c7a2460c42e4606af832391edf38b5c06c76ecc6de28856a5fc269099f955d12891fb1bba6ddfbae7a249e3abe7b085b6dc091c9cd0515a9b3a8813f063af96926952c63ca74b8ebf9cc0e20ed2a3d7cf98bbdfe0c8b20b391a44a229dbd939fca7e6701e5d58b42b2e647ac2c62bb07d7b1a8a56e5e0001405c82ea995ed07580cd8c52b8c5effcbe3b36e71680f24ed6de606a1e75544328d5e97ac38e1d5ded6b4846dd92cee959665cf8fafdc6126370bbe190a254113cc5839795001004154cb404b1ec64f0c3ed1be6fa21471660a2f846e52fa32cdd0aded585d5bf384d02ba206af403698733c9ecd601052b73aaaafde962c061923e34c265dc1dbc31b4e16a767f5d585591d9a9ff542de14f201d5211b817bfddc766cf20aef7dbb8cf8b5719af390116b51d77e99ccc99aef21d6ff6479d92bee4375758ebd8883b12f7adbdb8c584d59c0eaf0f91b9e5f3dfcb5b18d954e8b73794bf07b96e19c67d7bbc95ca06deb4c1d9e08193744b2369edcc54fc33d1ec9c4a8126b7460af3149d7424b61bcff05f8c8bd4fa20f8f8b2170e9f7bdedecf13bbb911bce81c0a5abd163ac30530c05a07187476f03a3905366e3b7a533add6caae9123818a6962990372afa3340e5d881b5d61f5777a0cc3f8f7a477948ba4f0f6a3a3b32d85658de0ef09323e637584d899f27c2027f6c409ee6d7d5731c5707a159db6a40d71b48b96b80cb0203074b06b852c517941ec100950e9469ab3877298ec2ed178692fb2a75f68aad66ea1ca0614f58355da6b25b647a79200a9812b78882c45e40bbb621c799affa9dd3e6e22dcce86cbb8bb9d6665db429c73a0725ca6b5a818849ec1e3f79345d1ae05673f7cd79ca80a34459d52b3456a11ddb6975dea60d6ae525849a409aadf67ad6f90c3f12b3db94ee5a893a6fcf68818e82c6de63478e1525d1734857d8aadd34a8d34f29d1a7c858c9a15b86a6d51a7c94c61806caa890071c43b6cd06211508d74bcd4ff0583ecefe952b0b73ad68c31b04a684e8452d1ef8555a443783e13615fb3c8a09b6b6c2fc8444d65ccc10d31117ac75bf6db7a32e31a5c13ed9694ff2af1ffdddb192fcd95bcf9207c786aed016d866ea64582382fcf9ff5846c72f715ad5d95dba7ed9e05a291367b845cf92862087a54807c72d4f67d3f053d484e8b89dbe4808fba9af94880b3238d2a64cbe3b792a11ace63055b3a619bb90d3f679f84ca9a1959bfdd65729121471af8712ef99329a1c0a6e091e2c5b0bbe85c506427854ff88552bcc37d349923dc22fe4d4b74dc6d3329c034ebf356b77308e2470b4672759703ebac8211f103f8c3c524168f04f1374ee83a83a3b78aefb0e284a633a24866c5c187798a9a26ba63f8e91d83314f5b2f3b4a0eb0bc329e4a815259f7d9a5c2bae643439134b3faa47c2d358946463dcfdbf8975a6b6c329479807e6beb49425de9884e09e9b8442622ac7c693f751ca17d39f0077d0593c74ef6e4017a6a3d79dda6642a9a7462159bc8dbe3fa6988dda738e1f4ac005df5eba4822f70188a6be0524eae0476b85dec422de956341a505205f8a1e4973d96eaf83530d48e2ad8b3efa2d515232ca62b9670fd33cacc011f46104900c212210d67b24e6d95c676ed8723e36f31e761e47ca90b900b5aa2cb57c22712d792fffeccd4162d970b9a8f9c768867f629cfaf97f023cb10367afb7ff254bff66b373f9dc0bf9a3936d5a19c7fedb49441870dcce57ce2f4a1af69cb3259f247964b26e9145b3c7f3503c2e1470538d51bcbb76886d2d92c03daee6cc0cd3e08fd88d96fca4f05cbd2d7e5936204ab13357ff6f9ec28f4ebbb06995658b11b3a45b9e2f7ac82ec2c6505f42df02bde0a374412b74469534b59c2cf82e9dc69aed6c2c96369764e67985022f59dadb6b9316e70b3ff790aea4a6d853d653c459975e24feb1f09028501b00c4c2575194e853e037166dc7556c65aa753e42641871a4254892b4ca52168d2a3b07c8bcd5cbb3a8315e106cfea089b6d6ac62920b78072eac061299a4ba554ea4c0be6b43c3c5ee2b65f7530fcfa11f6c9fe12427536906e34628a3d24d014e06e10139bd9efdc663930ea605adf1667836230a99df091eb3452347567465e72e6ffcc7dcf6a9499725ef1c870a9f637aed59dbcabdefd12c3aef9477030ee87707db2d136ccc2acefffcf403d1abb116836198f9bc317049c2d8e715ab17c8e13e0f2d8d69e3da2007addd1475ba05003ddad5e7d54b8966caf1e0e1605400512131e8f635253f0feedb0bd8c367349ba4f0919e84eaaeeee1eebc24d4834f5d4474ef489bf988ecc545f7e1e277feafd54a37bad16d335e872e046b3d0a4000b7d7f9ba49db50b2f6c26b62eff0f0b84a5298b2b51a7df0644521f5955e8edbb19ca9fd9156cb518a9b75eb59bf759e3edef7ef2d2265618e733035bd4ae00989f13356f1b6127df3195540a26ef5af0b711d5aefbfc4419889d7f27d1cd9d8a66d16290fed50e9440e240d00912b5350d12a30fce69616d888c89d30a3892ae373c93e57b8d9503e779097eeb2b6e79c53da93c6e0c5f6daf99087713bb589156ebadd022d1e4e9190f83120a1a47c16cd33a6e21c427b75bb75c064b1e81970816837a480c211d3e884b11f1f4acc6df51278cec2bc2bb4df27b8f631c06abbffb1c4e6844a4db1713d67e54e28a4d8562893942a28f3a4e418be3241cacda2932adb2f1288b7951c52ba0769f26eae7e72d7166661975a5bb8e4e7f2104a9325be2bd99c25bde7f4f3d69c7db2553f75e6314bb6558d522ab3d6066a8437f59073d0331d697bdf45d8acab57c01e5bee09b4fb270eb532cd7b7bdddc9a0d77b856d91e87f11261f578887c33e3864b38789e203e9956fbedb2de524f45ec01cc24fdf6eb11fc1e3b98884e4000291c07ab2c976e9c1f78d249ed992cb9a7e8d60179819d54590570ff4e88e7a3fbac1ff889e610e06361d8e77c9707d01478eeaa2a403ba3786a8242706fc82cc5735c4c161775bcfd01685f87b0078642a79b088", 0x8, 0x0, 0x1}, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x41c0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000840100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x6125, 0xe18f, 0x2, &(0x7f0000000000)={[0x101]}, 0x8) shutdown(r3, 0x1) 16:27:08 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/snd_seq', 0x201, 0x0) connect(r4, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x1, 0x1, {0xa, 0x4e20, 0x6, @mcast1, 0x1000}}}, 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000860100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xe03f030000000000, 0x0, 0x0) 16:27:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000007e817000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000890100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000020000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000040200000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xeffdffff00000000, 0x0, 0x0) 16:27:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000300000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000029000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 16:27:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x53, 0x3, 0x3f, 0x9, 0x0, 0xbd4b, 0x420, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x2008, 0x9, 0x4, 0x1, 0x2, 0x20, 0x9, 0x0, 0x1, 0x0, 0x2}, r3, 0xd, 0xffffffffffffffff, 0x8) 16:27:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000c10300000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:09 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000002b000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xff8f000000000000, 0x0, 0x0) 16:27:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x3, 0x2007, @fd_index=0x7, 0x0, &(0x7f0000001780), 0x0, 0x0, 0x1}, 0x4) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x4000010, r0, 0x10000000) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r9 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x1f) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020400000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xffffff7f00000000, 0x0, 0x0) 16:27:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@nfc={0x27, 0x0, 0x1, 0x1}}, 0xff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000002d000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000060400000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4000, @fd_index=0x1, 0x5, &(0x7f0000000180)=""/255, 0xff, 0xa, 0x1}, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000003f000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000500000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0xffffffff00000000, 0x0, 0x0) 16:27:10 executing program 4: r0 = syz_io_uring_setup(0x3b8b, &(0x7f00000002c0)={0x0, 0x5a5c, 0x0, 0x3}, &(0x7f00003b2000/0x6000)=nil, &(0x7f00003b2000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000080)=0x3, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x10010, r0, 0x0) r8 = syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, 0x0, 0x1}, 0x1) syz_io_uring_submit(r7, r10, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0xf33f) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f95, 0x0, 0x0, 0x0, 0x0) setuid(0x0) r11 = getgid() getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r13 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{0x2, 0x7}, {0x2, 0x4}, {0x2, 0x1, 0xee00}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x4, r11}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x1, r12}, {0x8, 0x2, r13}], {0x10, 0x1}, {0x20, 0x4}}, 0x7c, 0x1) io_uring_enter(r8, 0x78e9, 0x73b7, 0x3, &(0x7f0000000200)={[0x9]}, 0x8) 16:27:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) setrlimit(0x1, &(0x7f0000000000)={0x9, 0x9}) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x3, &(0x7f0000000380)=""/60, 0x3c}, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x20) syz_io_uring_submit(r3, r7, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r8, &(0x7f0000000180)={0x400002, 0x140, 0x2}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7a5) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r9, 0x1) 16:27:10 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000040000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x2) 16:27:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000600000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000040600000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 16:27:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000281000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x4) 16:27:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000700000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x6) 16:27:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000d86000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000900000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x2529, &(0x7f0000000180)={0x0, 0xbdb7, 0x2, 0x1, 0x306, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x4458, &(0x7f0000000200)={0x0, 0x307f, 0x2, 0x0, 0xf3, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r6 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)="80373dde600f98c992d304dd8b5cf70351c204bf8d83e684", 0x9, 0x0, 0x0, {0x3, r9}}, 0x200) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:11 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:11 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x7) 16:27:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = gettid() tkill(r5, 0x34) sched_setscheduler(r5, 0x6, &(0x7f0000000000)=0x91c138db) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1d, 0x0, &(0x7f0000000340)="4539aae022879c9a7ee560a1ed521696cae36f947475c6dd27bdefeb1e0593b58cbcb73321746488c584aea43e27613ea4b65a7a49eae138e3010d675d6f0fca968d5f2e7b102770715964bf880d375a9a7a6c889e842f06baf59e18b0468fa0f6f484796f2e99f9859c524022f0577344c8d3a99aaa0e93939b4e7906fe9ee4aaf3883d5274de3174fb98d90f3810e88d0afea131d275199e24559821a0548a748fb7ab261d316f2aaae10a308cd0eeb4c4a07d5749582643100579d9a61f360228468a0ce6aa", 0x80000001, 0x0, 0x0, {0x3}}, 0x673) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000ffffffe4000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x3) shutdown(r3, 0x1) 16:27:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000fffffff4000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000a00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:11 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x8) 16:27:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000b00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000fffffff5000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:11 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x44, 0x10000, 0xf115, 0x3, 0xffffffffffffa04a, 0x2, 0x8, 0x2}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000c00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000d00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:11 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf) 16:27:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000008e80), 0x101800, 0x0) r10 = syz_mount_image$msdos(&(0x7f0000008ec0), &(0x7f0000008f00)='./file0\x00', 0x7, 0x7, &(0x7f000000a240)=[{&(0x7f0000008f40)="884bd16adc2e06c44cf0e61e04caec665b0a64d8e8447fd2719942a279f814456f", 0x21, 0x1ff}, {&(0x7f0000008f80)="9b65e23f9c9a73", 0x7, 0x6}, {&(0x7f0000008fc0)="942f8d4c864358a17d3672b4f13817f2e3eb1daa971c04ef1ca52e73c79351ba4380fb852b1293d051b3df18d65176", 0x2f, 0x1}, {&(0x7f0000009000)="9f941b6354c634c6d8f51304273605548a8ea4a2a91f16e7eac05aa54118935735397098e68ca62eb685752dc1b2658d0efad6cee3696dfbe049126ac1ee6fb9f91502ce5604147ebbe0f91da8c047bef0c235a6c97e30ce6c3a4845e80aad2ce1bce761a5c11c8b8756cac4b3300e7e8169f3d9f53301715ee3144fd59b1fa98e976d7f1a8bb418c8e33ed003c6e467dfc4f36da6ef694c10371e2341075013b60b4abc777690a4fde3ff08792a", 0xae, 0xffffffff}, {&(0x7f00000090c0)="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", 0x1000, 0x5}, {&(0x7f000000a0c0)="cd9e52a418380b1b7ad5d4c7ad51b99c1f752507df166e4aeacc0e615c78fed54dccbe619e198c81f873ec0b7f58bd7f6a8e50b43554359080235f9cc4776a4c02f4983417ac61e458da097423fb630f0d34a5182bae03482c5de041c8c51c4aba94d43240d261489ff013be3e22e5e0c442b132131d18ef5038dc003579f363ae1057d1ae7c95bcd183c62f5fc9cc1dc71a083a7166ffc398b88feb3b8a9ca73be4031571e511a0376af82108c3a200eef52b3a7a80a98cb349771786fffac9aee37b19bc4da2ac8bf2f99a75990d5050e3", 0xd2, 0xf4a1}, {&(0x7f000000a1c0)="de5b2678713f49d010aa48db4fd24b138763b8118c5c328a0f95042c58449fb88a074eab95ede02234a10588900f09421cd2b022d6860a30f7293d71391d890b758c59491088f7c7d12c577ea5ba7a6869196b3c37e23a90c42c581eb3ae451787ef1d158534750aa153b3931747aaa028bb559f7e", 0x75, 0xbd9}], 0x8010, &(0x7f000000a300)={[{@nodots}, {@nodots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\x00'}}]}) r11 = epoll_create(0x6) r12 = fork() getresuid(&(0x7f000000a340), &(0x7f000000a380), &(0x7f000000a3c0)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a480)=[{&(0x7f0000005400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000005480)}, {&(0x7f00000054c0)="4281e603f325ae2c82e5c4d6256b7b1b58800f6ae8d58c24a1d5db6d928d4f17fd506e73fdf65d749e1337af51948593173d49b74cb8035cad933319f7347e65ba65052b1697817e22f60afc828238ce88b4b0729d22cfa84697d046", 0x5c}, {&(0x7f0000005540)="dca7e35599598ab41355129c8acb0a8d681b643e14902ea8176ed07edb771f1dbf8e6a3b726ac8edb53a31813171b39c2e2df1189fa09349dcd3bb913031317f1d40347832fddc17887801820c31b07704327e55e6f04982463b9b1ad127b36768312a813994c3aa65ea96bb", 0x6c}, {&(0x7f00000055c0)="96660fe7f138e096aaf9c47bf9c620c6240222d9970098ff9c29b09f4948bc814cf3bf3f222419b3a29ad94efc37978421924ac082246228be41f63d25fba88d0a", 0x41}], 0x4, &(0x7f0000005f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x48041}, {&(0x7f0000005fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006080)=[{&(0x7f0000006040)="5d8c6f3f676344f5c9e5573c3e39b4512781d2427c0c86a6e7e7addc2c2c1b8f2401a61b3d4a486938422a4a4ba06f679ac1ff5f9e597b1d9f1e530b", 0x3c}], 0x1, 0x0, 0x0, 0x20000801}, {&(0x7f00000060c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000006140)="dcb12c91c40300d29be75fbc22dba80dd24e1dd3d2d975f4fb74114dc389cb2809a1b03a95484238640cbf1f9176e510743c7ff1937e66e86ca89b6f0a72f711d73cecd11d65c69fbea81afa208e0d8dbe2949372f46d919eecc6dd544f13a3be8cbaf865316eab4adec9bbe53a43e7bbf346e68e7aa032f3394a655d349eee646fa03aff7f59ec122775df813", 0x8d}, {&(0x7f0000006200)="bbe90e8a5223458c550f6d9cb6124305683c04c556117d5d1e99d8fc9fb8eccc6fa03257db34aa49bd09ef3421c9ae69f78e896a4ef54d6a9eb474dafe46e66d121ab0600deb2934c844df36a7bbb1d82d5fec24f37c66477ede64bc291300bdf4096f76631e8c85c04bc3aec9bba8c006b1e3b5b78111d44fea28393791983f9f9e620da4a2e64a31dabdc9e30642b6fb8e09144140", 0x96}, {&(0x7f00000062c0)}], 0x3, &(0x7f0000006340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x400000c}, {&(0x7f00000063c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006440)="3b526962e6c41c71cfcd179e29732f9fd523e5b74c94d7c7429ab7abca67ceb5ea13f241750c5427289e8eb7e2f24c066e129d53f39b665b1ef36b24b37db6a06fa25822d1af9cf136f74e19c5dadf68333b902cfd986bfbb1d3b72cf7d143cd6f95591acaf3df0fb04c01b37261f512fac1f381c43b8e2f74c793d93fbb36adb6a01e93b82caa53eca08db9696b779407c789344a6da17670e09584c4516ad9a255992f1e2714c8c9e4eae54a9442fd90e2ed285348236ecdbec07a7dcf76cff6965aab56bf8a509b4654bca83c5c1ef695b22332c2b93341fa138508a4fb0103462baac6737287f76df613db772a8c6dd510698a0ffb04", 0xf8}, {&(0x7f0000006540)="cbf76e4898afa8fc3409a926e6358fd55433bab7f3e39f06d59960610cfad3c7b0bc4c9661d456487ca5419259df40e92c46f3e38f56f65fd9a8837fe1ed87a9c2673762d4c82568b9e2380817a17f4a85f27d0b8a628e43f2dcf7d942574ded7499b0a40143b42e95ca38479b811554ca0f6a159d14c46218e06e9f7d", 0x7d}], 0x2, &(0x7f00000066c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff]}}], 0x78, 0x40010}, {&(0x7f0000006740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006a00)=[{&(0x7f00000067c0)="0a55790efc3bd53ae62cb48a78fefa5529f9bfbb64670f0fac533301257671d208bbbc256faaae83f15ec7da8e47d801629e119417f799b4aece9b44c9d57a52763ae86d75a2f119f3ae4ae9e97547ddccf12ab7f868a9106eec17e7c94f7924286b7a2aa2ff893639c11e31dd1fffb10606d7243495c71cf78d1c777e8c3c881b8476c60000aea5bbee40e33e9e60cc76dc31a469f51268e9d0c3c2d5b6af67e1d9ec082b6c5242fd07d6f275367f264ec1661ebe33a822ce6ab23d0768454bbee4374995e3fefb398472724cb87ef01ec119a296b0f0d78c8d2bc3911aada5b4cc0108006450af54a9eb1c79bcb9f1f691", 0xf2}, {&(0x7f00000068c0)="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", 0xfa}, {&(0x7f00000069c0)="8b73a86ea92b8e75db542c09b0608e2070cd41d0332a6ccc2ce26e17788797f4cdf01344", 0x24}], 0x3, &(0x7f0000006a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x4000804}, {&(0x7f0000006ac0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000008e00)=[{&(0x7f0000006b40)="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", 0x1000}, {&(0x7f0000007b40)="098849de8f892368263ed72de32cfef448ca609f462349553048806060067c5cc965d33e778f080dccba17c27efb0245439e1a76e41600293fe1e34eca8b6e3ed22ac9f7f1ceac207310d36c88d50693fe96eb037f7aa8f6c307a06b9bbb2855577be704ac063811109a2bcf4e2f03e2c4a12f47ed73e7f0cb9a8fb10f7db41cedba4043ff7bc819d05960f2e078ee2af070d4145951468866c3281dc904418a622dea334c64a8257b97", 0xaa}, {&(0x7f0000007c00)="341593682327abafa8399b2398720958522ba6b945e9607154f0", 0x1a}, {&(0x7f0000007c40)="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", 0x1000}, {&(0x7f0000008c40)="21de73bd6ff5b2bee5d440e4c8adf8a37b23ef795cb04cd9aeb2157ead7f0f0d3b91ff8ad258b109cde819d72665126a9e5921aab060992b387c93668ef598e65d3f8eab", 0x44}, {&(0x7f0000008cc0)="26ba0ca43033672ca96a5c5d271373c4b8e3e9e90af2837699727dbdd163b18bfe849164dc6751bf46627e48e244e019b00e494f191c27ba72af5d73d31382fb30864304c36f9f532e2cb94b788d597732dacfc3c5036921ad2f691cf1139c44d98f5f1aab", 0x65}, {&(0x7f0000008d40)="f0e6619dd7d66261e58c3a19458ff8ca797c32868448a1292791d67f5d418f75327c03d19551cedb5b0a486a8e5cf3547eb50efdd62f3859bc33d1126b3393d17d519fafe0c7eab74acc84c466bb1f72f6a30eebad0fd90b25224873f79855b267180dee0cd130c20014859d3eff3533b62f35158bb0475c9f1918b0028dc7dee207f070bf4e3cfe99b691c58573d05d82c7a883f7ee3ed013e847aff2b4d03278eca3599fb13a", 0xa7}], 0x7, &(0x7f000000a400)=[@rights={{0x1c, 0x1, 0x1, [r3, r5, r6]}}, @rights={{0x38, 0x1, 0x1, [r7, r8, r9, r3, r10, r0, r11, r0, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee00}}}], 0x78, 0x40080}], 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000fffffffb000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000e00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x11) 16:27:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x5b70, 0x1646, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000fffffffe000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:12 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) getrlimit(0x6, &(0x7f0000000180)) r3 = fork() sched_setattr(r3, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x5, 0x8, 0x7, 0x9565, 0xa3, 0x7, 0xd0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r4 = getpid() prlimit64(r4, 0x5, &(0x7f0000000080)={0x100000001, 0x7}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x488}, {r6, 0x8426}], 0x2, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={[0x7fffffff]}, 0x8) 16:27:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000f00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000001ff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x30) 16:27:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000f80f00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r7, 0xfffffffffffff71d, 0x0, 0xff, 0x4}, 0x3ff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r8, 0x0, 0x0, 0x0) flock(r3, 0x8) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x0, 0x20010, r8, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000005ff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000201000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc0) 16:27:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000001100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:12 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000000)={0xcfc, 0x7fff}, &(0x7f0000000080)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000fff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) sched_setattr(r5, &(0x7f0000000000)={0x38, 0x5, 0x10000020, 0x8001, 0x570e, 0xbeb, 0x40, 0xa42f, 0x1ff, 0x7}, 0x0) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000001200000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd(r3, &(0x7f00000001c0)={[0x8]}, 0x8) connect$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x401, 0x80000001}, {0xae, 0x101}], 0xee01}, 0x18, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x600) 16:27:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000ffffefff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x10000, 0x1ff}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0xb, 0x200000000000000}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r5, 0x10000000) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000001f00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000ffefffff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x700) 16:27:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000002000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8c, 0x10004000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xc737, 0x10, 0x0, 0x2a2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000e4ffffff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000102000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000002200000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf00) 16:27:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000000)=0x3083, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:13 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r0, 0x10, 0x0, 0x0, 0x13, 0x1, {0x2, r4}}, 0xf75) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000f4ffffff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000002500000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r4, r3, 0x13, &(0x7f0000000200)={0x15, 0x7f, 0x3f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ptrace(0x8, r3) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 16:27:13 executing program 4: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = dup3(r0, r1, 0xed51a429b65289d2) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="36d951bfc17e5cddb713760d83da09b257aa0fe2e4e0ac99e543547186701fc425c709282cafb2824358f36e126cd0ff2f95d249c8a722a58d08ea327c40014d9b6a4b10ec71cddf7d54c37b3ac74e5203389c62803964c1bb4c8232dc1aeaa74a63aaccd0047b0386dd89a83e6c356a7d2e3d6c545628c62370901eb7a00c8f2aaa338148964cc81757c4ec229ac25088ba104a0ac6eac7d4c55f2e0620d11f270351e0571f7fb220bc664b50030ce87a137faddd1f750fd776e09a4fbbd27e375b3f485e0ba22cb8578bad", 0xcc}], 0x1, 0x7fffffff, 0x1000) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) write$binfmt_elf64(r7, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x96, 0x3, 0xa4, 0x4, 0x3, 0x3e, 0x2, 0x5f, 0x40, 0x80, 0x84, 0x5, 0x38, 0x2, 0x6, 0x100, 0x8}, [{0x6, 0x3, 0x7f, 0x3, 0x4, 0x10001, 0x8, 0x2}], "288585acdde288d33ef7b1edadfedb7122b4972d9790571719eafb5bd54010cfe515a04ce0b1751e7ce0046f09e6a66298de", ['\x00', '\x00', '\x00']}, 0x3aa) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x20010, r7, 0x8000000) syz_io_uring_submit(r9, r5, &(0x7f0000001880)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/155, 0x9b}, {&(0x7f0000000b80)=""/219, 0xdb}, {&(0x7f0000000240)}], 0x8, &(0x7f0000000600)=""/30, 0x65}, 0x0, 0x21, 0x0, {0x2}}, 0xfffffff8) io_uring_enter(r3, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000f5ffffff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x1100) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000002e00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000fbffffff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000012e00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800) io_uring_enter(r3, 0x2db, 0xd90d, 0x3, &(0x7f00000001c0)={[0xffffffffffffff81]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x2000) 16:27:14 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003840)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000400)="89bddfa525927df88f331fa405900e427a3e66af5dc9c28d214b875dcff6d9db65bb44ddc3776ab8f0b2872c18014887562cbb3b8c0ba4cc20de57a797860e4b386b064f4e4b33786dada038ffbb7b76952f3de896d08e18156c662484cc315c8822173da33451f5035d2f62f084a89091d90520820dff92da2bddf4ba80a7649e8c64ed03db320a914c19b5f6fe9ef0e05f02f09e0956f3d6a771544e53bd0239a12ae757ff79da81f2063fdd587a532c1a31390f8677362746388c3202d0d0e3b5f7c60f91", 0xc6}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b1083042fdfac6977a62465589fff864f86e7304b6bc43873d35923efb952138bec210539e58ea1cd3c91522a5bcebd144a12b97fca4290e49a4879676722163f85b62edb2810cf01786143d5bcbd6c524818d5dbf6b5a014dc4dc4f7a54ce6e6c9330", 0x63}, {&(0x7f0000000180)="98d94aaafc998d8005f8a8c7d3b0874e7b2c48674553be552c954cd3967be0801a99d4ded5102b385c", 0x29}], 0x4, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], 0x2250}, 0x0, 0x4040000, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x400040, 0xfffffffb, 0x1, 0x4b6d, 0x5, 0x3, 0x2b}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000000)="16afb5751935e755a9a5f6", 0xb) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000200)={0x2e, 0x4, 0x80}) shutdown(0xffffffffffffffff, 0x1) 16:27:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x3000) 16:27:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000003200000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x0) syz_io_uring_setup(0x5cbe, &(0x7f00000001c0)={0x0, 0xaf63, 0x4, 0x0, 0x100}, &(0x7f00002d4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f00000003c0)={r11, r12+60000000}, 0x1, 0x1, 0x0, {0x0, r13}}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r14, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000440)=@IORING_OP_NOP={0x0, 0x1}, 0x8000) 16:27:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000feffffff000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000003f00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x3e80) 16:27:14 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x3}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpgid(r5) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x10, 0x2000, 0x12345}, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r10 = syz_io_uring_complete(r1) syz_io_uring_submit(0x0, r8, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r10, &(0x7f0000000200)=0x80, &(0x7f0000000340)=@un=@abs, 0x0, 0x800}, 0xe56) shutdown(r3, 0x1) 16:27:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000004000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x3ec0) 16:27:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000100000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x12eb, &(0x7f0000000180)={0x0, 0x24ec, 0x20, 0x3, 0x33d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x80}}, 0x6) 16:27:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x803e) 16:27:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000004800000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000001000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="30010000", @ANYRES16=r0, @ANYBLOB="00022abd7000fedbdf25060000001c00e7006d48ca1d79e1c01db0e811198f9da481d3d26545ef69aba808001780040004001c00e70034a4eda1a500c7180314a16bc6aa52c84cf8290e74f126930a00e80008021100000100000a00e80008021100000100001c00e700c25f33d51f5f65ed76fc8fc6785668679fbdd11bf697a7701c00e7008db2c0e878a470664e754854385eb66de51131c17b44fd280a00e80008021100000000000a00e800ffffffffffff00000a00e800ffffffffffff000008000500070000000a00e800ffffffffffff000008001780040004001c00e7006d1aaad2ecec62a873697596f38b587c9e595694dd7911580a00e800ffffffffffff00001c001780040003000400030004000200040000030005005300"/298], 0x130}, 0x1, 0x0, 0x0, 0x400c010}, 0x4004804) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) io_uring_enter(r5, 0x203d, 0x68d5, 0x0, &(0x7f0000000080)={[0x6]}, 0x8) io_uring_enter(r1, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000004c00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x8fff) 16:27:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000002000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000006000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:15 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x0, 0x10000000, 0x8, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc000) 16:27:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000ffffffffffff07000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000016000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0xc6f1009e18c45627, 0x4000010, r0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1000) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r9 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r12}}, 0x4) shutdown(r3, 0x1) 16:27:15 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x3, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000200)=""/72, 0x48}], 0x3, 0x4, 0x1, {0x0, r8}}, 0x6000000) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000080000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc03e) 16:27:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000016100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000010000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000016200000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xff8f) 16:27:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000020000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x1b3c, &(0x7f0000000180)={0x0, 0xf6ad, 0x1, 0x1, 0x1e}, &(0x7f00006d6000/0x13000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r6 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r9}}, 0x6) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x12, 0x110, r0, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x18, 0x20010, r0, 0x10000000) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xf5ec, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xd7) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r13, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1, 0x80010, r13, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000016300000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x20000) 16:27:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000006800000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000004020000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:16 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x6559, &(0x7f0000000180)={0x0, 0xd4e9, 0x2, 0x1, 0x339, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4}, 0x10000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1040}}, 0x5) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000001, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x210}, 0x1}, 0x2) 16:27:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x33fe0) 16:27:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x4517, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x7506, &(0x7f0000000380)={0x0, 0x77b1, 0x4, 0x0, 0x31e}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x1, 0x0, 0x1, {0x0, r5}}, 0x1ff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r6, 0x1) syz_io_uring_setup(0x3944, &(0x7f0000000200)={0x0, 0x93c6, 0x20, 0x3, 0xe2, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x4) 16:27:16 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80001) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x800000, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) io_uring_enter(r1, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r1, r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0x6, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) setrlimit(0x8, &(0x7f0000000080)={0x800000000101, 0x9}) shutdown(0xffffffffffffffff, 0x1) 16:27:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000030000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000006c00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x34000) 16:27:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000007400000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:16 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000) r8 = fsmount(0xffffffffffffffff, 0x0, 0x72) r9 = syz_io_uring_setup(0xffffffe1, &(0x7f0000000080), &(0x7f00002d5000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r8, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1, &(0x7f0000000080)=""/62, 0x3e}, 0x0, 0x20000, 0x0, {0x1, r12}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000007a00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x40000) 16:27:16 executing program 4: r0 = syz_io_uring_setup(0x282f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fallocate(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4b3a, &(0x7f0000000180)={0x0, 0x35ac, 0x0, 0x1, 0x77, 0x0, r3}, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = io_uring_setup(0x7f83, &(0x7f0000000340)={0x0, 0xc729, 0x1, 0x2, 0x4d}) io_uring_enter(r5, 0x3a92, 0x22ca, 0x2, &(0x7f0000000240)={[0x8]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x20400, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r9, 0x40045402, &(0x7f0000000400)=0x1) fcntl$setpipe(r8, 0x407, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r10, &(0x7f0000000200)=0xfffffffffffffffe, 0x401) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000040000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000007e00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:16 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readahead(r0, 0x2d, 0x200) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) connect$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) shutdown(r4, 0x0) 16:27:16 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_hda_codec', 0x400000, 0x4) io_uring_enter(r5, 0x6426, 0x1294, 0x3, &(0x7f0000000080)={[0x6]}, 0x8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x300000) 16:27:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000050000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000018400000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = epoll_create(0x69) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x30, r0, 0x8000000) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000018600000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) [ 1753.444154][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 1753.444168][ T25] audit: type=1326 audit(1625675237.021:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 16:27:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000060000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x400300) [ 1753.498322][ T25] audit: type=1326 audit(1625675237.021:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=213 compat=0 ip=0x4665d9 code=0x7ffc0000 16:27:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="8f9ee946ca639ac1f64cb4c72edde6fb48177f47547f", 0x16}], 0x1) sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000340)="09f103f33c90f95a6b389ec51301dca282bcc464adfe596b20d8f04003b96658cee18f4ecf29d7f0c171b85c2bc13029df6a517809e79daa89635236c5193763a85eb9e6387367b606edb103819ea74edc3a5760e3f342b3d36dcaaa8e03ebb75973ce8a080982c9cd03efdbbe90d93f204f76f5c8b6e45d232aabe35846e6309cf7ef2ab1d2de08a900d855c2e76abf7a9fc1c241de627a083a2890e4ca7b8c8ba968fb0e84d1622b6e8da90e144e4096d7369a2e05e449bfe3fa365d7bbd68bca958f7ae02e8b0f35f3dcb22ac6a89b9f35dad14e7055c", 0xd8}, {&(0x7f0000000200)="b708a5b6e0ee272aa5a9c0d64435d9a799d4c84f310956691d144b6c802867d9581a1b0e7edc414eb79d00f52a058963ab11b2f90fc3cadbd4e671", 0x3b}, {&(0x7f0000000440)="9fc199d31deff1d74cd7fd2bbbb8af7530dae98393e1901ed52db7bd5cbd635d43171e808075ea0b5737ca97d3498c59246b11b137571d3d6054db48dff48a21ede7352c9d54431280c207cf4d29273af6e3edc8d629bbc0e8b4de17655cd62a790d373ecf7c7143053fb76e6f52952725e6508f9aad76b4d8fbff65410720043bc5f3160e62dc3c8aba6800fb9e29747182050101b4920471f05e4facff5e78a38ad4464903fb4f054ded826b841d37ee6ea96bc14e8991cbe98d1ff618a7e8f8edda60ade8073879a9dd99b91031ae91fa420097d7a1e14051509c0cab3ca926ea03e6195c64b44d3a0ced517c", 0xee}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x20, 0x8010}, 0x805) 16:27:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000004060000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000018900000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) [ 1753.553793][ T25] audit: type=1326 audit(1625675237.021:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.607702][ T25] audit: type=1326 audit(1625675237.021:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=281 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.640528][ T25] audit: type=1326 audit(1625675237.021:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.664805][ T25] audit: type=1326 audit(1625675237.021:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.688946][ T25] audit: type=1326 audit(1625675237.021:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.713160][ T25] audit: type=1326 audit(1625675237.021:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=233 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.737334][ T25] audit: type=1326 audit(1625675237.021:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 1753.761726][ T25] audit: type=1326 audit(1625675237.021:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=2565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x4665d9 code=0x7ffc0000 16:27:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000), 0x1) shutdown(r3, 0x1) 16:27:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xfeffff) 16:27:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000008e00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000070000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3ce4b1525d9053ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) 16:27:17 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x800187, &(0x7f00000002c0)={0x0, 0x2b97, 0x0, 0x800000, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000008f00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:17 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x18b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r0], 0x1, 0x0, 0x0, {0x0, r4}}, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r7, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000080000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x1000000) 16:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000009000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000004080000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r5 = socket$inet(0x2, 0x6, 0x7) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x341102) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) r9 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r0, 0xffffffffffffffff, r3, r0, r4, r0, r5, r6, r7, r8], 0xa, 0x0, 0x1, {0x0, r12}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:18 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x2000000) 16:27:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x80000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) setrlimit(0x7, &(0x7f0000000000)={0xffffffff80000001, 0x3ff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000009100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000090000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:18 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x447e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x800003}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000009200000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000c0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:18 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x4000000) 16:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000a800000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000d0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0xfffffffd}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x80000, 0x1, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x63db, &(0x7f0000000000)={0x0, 0x1952, 0x10, 0xfffffffd, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4f19, &(0x7f0000000200)={0x0, 0x9d1, 0x10, 0x0, 0xdf}, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xfe) 16:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000a900000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x6000000) 16:27:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000e0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:19 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000000), 0x0, 0x4) 16:27:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000aa00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x7000000) 16:27:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000100000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000ab00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x8000000) 16:27:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000110000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000ac00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000ad00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x32f8, &(0x7f0000000180)={0x0, 0xdb82, 0x0, 0x0, 0x385, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0x9, 0x10001, &(0x7f00000003c0)=[{&(0x7f0000000200)="b1c07420183f81ca49d17510f192b1db881c0042c48b05fa2307ecb6dff1f23221449e94059a423d1bb35569bf546079354296e0e5c3788d65d4bea1e4943bcd81aafa6ffb8d697fe72c8e9512cb118e2d4a59431a797e3859221dc82c14fab1e0523b7c98676ae3ef88fed6b9feb95afd2410391a8ae3e709", 0x79}, {&(0x7f0000000340)="4fa3d46982c4f3a02c570e753108f1e03712cd75c1270abfb3c83a2c8c364ebd39a0cf636b7a772fc19791ffa1b01fbf6552abf57d803ea4bc77a508f09d74359177ec3241f654598f4291fac12269b8609be411d4", 0x55}], 0x2, 0x6, 0x0, {0x3, r8}}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99}, 0x0, 0x40000880}, 0x9) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r2, 0x1) 16:27:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000120000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf000000) 16:27:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000ae00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xfffffffd, 0x10001) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ftruncate(r3, 0x8b0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:19 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() tkill(r5, 0x34) prlimit64(r5, 0xf, &(0x7f0000000000)={0x4, 0x2}, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) setrlimit(0xf, &(0x7f0000000100)={0x7fffffff, 0x5}) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:20 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r3, 0x62c0}], 0x1, &(0x7f0000000100)={r5, r6+10000000}, &(0x7f0000000180)={[0x20]}, 0x8) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x13, 0x401, 0x2, 0x9, 0xffffffffffff0000, 0x4, 0x5, 0x40}, 0x0) shutdown(0xffffffffffffffff, 0x1) 16:27:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000af00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000007e8170000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000000)=0xfffff4b0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0xfffffd51, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x11000000) 16:27:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000003c100000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000200000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x80010, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000b0a000/0x1000)=nil, 0x1000, 0x100000d, 0x810, r0, 0x10000000) r6 = socket$inet6(0xa, 0x80000, 0x5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/122, 0x7a}], 0x4}, 0x0, 0x40000000, 0x0, {0x1, r7}}, 0x8fd) 16:27:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000c0ed00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = syz_io_uring_setup(0x7c8b, &(0x7f0000000200)={0x0, 0x44e0, 0x10, 0x1, 0x3b0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) shutdown(r3, 0x1) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x403}, 0x1}, 0x0) r9 = fcntl$dupfd(r4, 0x406, r4) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r9, &(0x7f0000000180)={0x90000000}, r10, 0x3, 0x0, 0x1, {0x0, r11}}, 0x32) 16:27:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000290000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x20000000) 16:27:20 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x2, 0x2, &(0x7f0000000200)="99793e1b3ba18d859e33b7665a01078c6b82589ec2be8ca7ea2804872bd77bed15436a71feb6f6f044188a440ffa8ffb526a088aae69ee461dc52a26a672584cc504639b74ba34e6042285e42bfd4473764e69f297b3e1b1d178b4b47f4895d590f1d4451a9354f1fca2b3cff980cd37e00d23d66a13428b4ff0d5001e3c", 0x77f7, 0x0, 0x0, {0x2}}, 0x1) 16:27:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000ff800000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000002b0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x803e0000) 16:27:20 executing program 4: r0 = syz_io_uring_setup(0x3c9f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='net_prio.prioidx\x00', 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x38) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) r10 = getuid() r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001200), 0x20200, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="86362fe5", 0x4}, {&(0x7f0000000340)="8121c446086b1c6b822d725f54016958286e8014375415bdd38041ec8f00fccd80fe2edd21135f25e2baa271926df4627f4e4539d09d29cfd512433e513f9c561ac6a44777d0036d42564608451640856021a62a69968039c5bd700ef1929cf5f844a4d075cf75e4c8cea059b9224feb867a3244cfe8708d4bbea45cf1bd75c7453c7d88104eba26e2b5b20ec420a87ee8ab56573e560a4c5191f6817a76b174fee27eff3c202a97762ba57aad10dfa60dddf3d68cf3f886e83ffbd524aa279ea5c7da1c145436b56bc97ac7763a6902e34e675201eed31a4f657fe035a131d7f53fcd971fc0dd9225a7", 0xea}, {&(0x7f0000000440)="575af0caea0b7acfce02513584e00fb4c7b3900ee1ecc48d07f13899d762886b833a92a8aad8785e78ca40de1834a7", 0x2f}], 0x3, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, r4, r3]}}], 0x70, 0xc000}, {&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000780)="710f8d2d558015a1a7d796bdf202f8da326980519330e167e456ddeb9ab00b4308a7e76f200422f33730f432aa307d7b0c7e18a938895757e0587ac54251d092784a54f5554f849cd5169aab2056b74a22df13b773be5fe74f333aa005d67cd9f2b94ce6e162008f1242c4efdac6ca18d58f99ad9810350dace1835722344cff041da7cbd851b1978d", 0x89}, {&(0x7f0000000840)="2d50ddb4490e459a95274a64f0b66aec14f328b1375e64ae7834f3f316c82ce41868e276a5e3c943edb3a71df5afd308f8ea0e38611e063c5e3b185e59649082ec06e8d9c356125b039ca73101b6e175b8f81cdfed83c1d5951d783ceb12a824b1dc7aa8ab21cdc3805be37503ea1ac6477dcec4b05b42839fe0f4a0363564daeb275b2de025b20d477ad9d84226b8a319749a11981adee913850cb8ef08a109919e56b6b9fcb15e59e55432", 0xac}, {&(0x7f0000000900)="3b62bc6c4e2d927a8d7304aff1add66b1a3a047a0e4ca858a04af87e5bdf557aa6e9b18202e53e1b1959d4ed4acef9dac6653466a18c33035a96db0e196dadd3bd19f7fe1b52e2cb8d9af991bf66a2212a53efe18b7ef46afe7ece030385cf7e35388e94c1e97a5641d03d13669e628320c4ba422c081b7a751eea480bf10c7c9f248ff64c4180d5f46a1847577739abea0fca82ac06a949f8a6eb1c668fda3f1a7bfa75b86d0bdd322e5cfd570a980e1ce98216c72d8b83a3b77b9e0b0977a51f92aa8f884d92b63d2447e1f5e8005426f077386a083adbad9f06dc818c622aaef2917e70ffb721819c5659b91e1d995b227eca27108080", 0xf8}, {&(0x7f0000000a00)="9515e3991d5cd103c1278426b25858d669ace91025347082bd8c58fe480aab196f9510e10f9f5e8c8deb1ddad5ae216099253375136ca9e28cb46b668faf493b3bd1a1abe4747670786f4874a2245eb9ce464962e07dee97720b996b8c0417f1507218e168647c248159d5d3eabf4e036ad91a207a9f8befd8b7a0fd31c9ff30256399d80388f7409434e554025bd71e795a4db6fb5766eea8ccdcdb2d6e04a026f339fb90cd1f5cc986caae74214a5883aaa96f866c6b59aebfc6b3a5725a78c0ee0e7584221012344e259239fbd7aa6eb4d3365cbd877520346b17d5a4f1cb65d7a5bc094c11feb09a880f773ae9", 0xef}, {&(0x7f0000000b00)="e51ce417b5db6a42c71212251e44885a6f009351543f5db8abd1561622c42b81288cbece384bac6d4951e933b43b4c6c9704d76cb2", 0x35}, {&(0x7f0000000b40)="e89a82e7eb9fbaa6cb74bbfbc6b9ba6d11d0e71d29fa39db4beb192de043f325ce4a4fa33456f32bda43b57613cc27316bf9d2fb09b2ec7826419e42395ae5a09e13f80009c6e3fe4883fba268f632ce022d7335b7cc5f492e95c664500df2bef5bc168b9dec7af35c749e68bd", 0x6d}, {&(0x7f0000000bc0)="67e9ae9837e637e7082073154e6409faaea869c76796608c965b26e4bc00e747", 0x20}, {&(0x7f0000000c00)="f3ef4d5c087927a4bffb001a98391df476af6dde5f51919649dd523e3c6aa00758e520b65fc14fd5804d7ec162b4400b40bd3823dd1150a7191693abb743d1071d25061df510243760122a93d84da44440811c9b93f27d1c7cd46b068b432e750d92c1cf35f8cdab5078c7d3f9ff008f0d7b9530356deb2bc7e4ebaa4fa7c44821eec7204608f623ae8c452ab9253251847382b458f8e4473babab6b04a54f509a92ca6bd7c4f79f867ad5f4", 0xac}, {&(0x7f0000000cc0)="522ad2735fd5884b760fc4f7e73e9ee61ea31a785cf3df58235a2ff5e250", 0x1e}, {&(0x7f0000000d00)="949551f292bf41016f47dcc15e24856b60c6d9be1c9e41e915d835cc2a950a0d0d51052c8049e89e61acc16fa3653bac80b9b808786efebfa2083e5abd1b65f3fbf759267729f4c630afd4b8bb956be6f4a6d4d0783854198d8a718724916cfbde765f7b0316bca73b6ff54a9e3ee2ae10e0e32c5dd8a21dc675e01a7565b8f35175a8b0c6649791a3b9c0e95a8bf3179eb9410aa90977a02d8e09b92c1e7d294db80176a26b558a33c599fb3e10d5a480d9e06dd5f177383cc59585325e1ffe32d854fc0663ed0dd889f787f1cb385770c8fcdd23588c369b7a09", 0xdb}], 0xa, &(0x7f0000001240)=[@rights={{0x1c, 0x1, 0x1, [r3, r4, r4]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r3, r3, r0, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r5, r6]}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r7, r3, r8, r0, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x128, 0x8}], 0x2, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000fffe00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd_index=0xa, 0x10000, 0x7fffffff, 0x80000001, 0x12, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000002d0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc0000000) 16:27:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x188, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000001ff00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000003f0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000180)={0x7fff, 0xfe}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x5, 0x7fff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r5, 0x7f0be000) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fallocate(r7, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000000)={0x7, 'syzkaller0\x00', {0x4}, 0xffff}) io_uring_enter(r1, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc03e0000) 16:27:21 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x3, 0x7fff, 0x9, 0x98, 0x465, 0x80000000, 0x5}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000400000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000fff00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x1, 0x0, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000080)=0x6e, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000340)={0x0, 0x3, 0xe3, 0x20, 0xffffffffffffffff}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x418000, 0xd4) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) fstat(r6, &(0x7f0000000180)) 16:27:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xe03f0300) 16:27:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000feff00000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000ffffffffffffff7f0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) getrlimit(0xd, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x101) 16:27:22 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23457}, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000002000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000002810000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xeffdffff) 16:27:22 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x2000001, 0x8, 0x400}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x60ffa19d0ae8c07f, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@l2={0x1f, 0x200, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x6) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000000)=[r5, r6], 0x2}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ffff03000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000000000d860000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:22 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x0, {0x0, r10}}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x21, 0x0, 0x8, 0x0, 0x1}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x1c, 0x1, 0x7ff, 0x6, 0x7f, 0x1, 0x5, 0x7}, 0x0) shutdown(0xffffffffffffffff, 0x1) 16:27:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf5ffffff) 16:27:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000004000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) open(&(0x7f0000000540)='./file0\x00', 0x200000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x5aa5, &(0x7f0000000200)={0x0, 0xeab7, 0x0, 0x2, 0x220}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r0, 0x2a6e, 0xfffffffd, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)={'security\x00', 0xd8, "1ac7f6d74c1350e57976762c55fd0f3b23081f85493ca039c05a54921b9bc39148297d49a53659cc58a9dce38a2b67d530b899006f9f3cf8b20097df8de6886543f79bf7ef0132ce94f5214054db5066541d802b1712bd3d12865273fe5fdbb83cf6efb8e3f126e071c158f6d043a1307eeaecab8a84a7917bd3f26aaac91b4a61fb3f3e8431dcf7e69b7627855a90ca1ec3018c77eb9d1bd77eef8ab70cee327576bce98f38dc5543af96d53e926befebbf68e6efdfbc380683b1efbab3b0c545e6b9ab2095bd3cce8c8334b33788be8823a5382c8dd8ce"}, &(0x7f0000000180)=0xfc) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)=ANY=[@ANYBLOB="0300ea003891fd9989aa39ecbe1d51f23ed07dba6efd1d8e1f02277529ae885094c8988d64014b09d009eed3a99de4097f40fd7e63f1ea6f26f0eb3a0ace9e0f6b481099493419341caacb21b47fc9b834669ebe9729aa2a49db5ab7d6ff6a05f16ae1e30c4376ec484f15ef0cc62336a2aa6d089d15ea623cbfbf7137971ca54a7e7b611558410319c19c037c1aa813346e19a94eb6b8d53a73c13475f99c60358d3bafbfff7af5262f099a1eda1e1b40d8811c1eae80c390c9a9fd4924116f99983c7a9bae90a15cca0ee6d27bf69424b734a18a92e277c8c23e3c11deff83f52f6e3c7770a0b1532ce7f6e234"]) 16:27:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000ffffffe40000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000008000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:23 executing program 4: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2008000) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xff8f0000) 16:27:23 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r3, &(0x7f0000000080)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x80000, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r4 = dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x9, 0x4) shutdown(0xffffffffffffffff, 0x1) 16:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000400008000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000fffffff40000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xfffffdef) 16:27:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1616, &(0x7f00000001c0)={0x0, 0x6af0, 0x8, 0x1, 0x3ce, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000240)) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x5, 0x0, &(0x7f0000000100)=""/53, 0x35, 0x5}, 0xfffffffd) mmap$IORING_OFF_SQES(&(0x7f00006d3000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r4, 0x10000000) r7 = dup2(r0, r0) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r7, 0x0, r0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00000000000c000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xfffffe00) 16:27:23 executing program 2: prlimit64(0x0, 0x4, &(0x7f00000001c0)={0x8a, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x8000001, 0x4d4, 0x0, 0x8001, 0x80000001, 0xffff, 0x9, 0x7}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000fffffff50000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000010000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xffffff7f) 16:27:23 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x5, 0x2c, 0xdcd7, 0x5, 0x5, 0x9, 0x1, 0x8, 0x952}, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) io_uring_enter(r2, 0x4f96, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b00)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)="0aa824bd1a99ff10a5a197", 0xb}, {&(0x7f0000000580)="c945c7557f98c374e906989000e4929f676e0e796f8baf1088063e0ff513ba60a2fc37b1bd14e0581959a34837053ec7d85dfa4173cbd7e2940f3a45cbbe055309b1f9777197920c2c933414b1ea185cf1e13ec85682afb62487c1e8b1fe752b6a076e2511e3ebf24971162c113b7eff9a745cd5c7cf4bf9c61a76b9382383ff75a320198fdb338cedb90908", 0x8c}, {&(0x7f0000000680)="859a21a56e4756e80e3922a7b3bcb83169d6d48decb16e74b2bda8cca719e0329464c5e8806b9788310de70ad392d8e464ab36665b65166e3b04298dd552c09e62cda7bd747524d0aeb22f1d297b0c3c68e55c58a52e29ffce2e1eb2a52e7f50fbeb137192bed6d7e2b63be2236d80f5956cc2bda698f7b0216dd8ac9556dec65db2052a63b335cfb833d050e3f75de3495ff85d08746e2783de179c750a3a4281cddabacbe64a9a45e569ecbe69cc0fe3165e085e42ad01d8b2cebef41ed9fc52063ade73019aba46435c53e0aed5125f5a6bbac70f60925ac13248789e3b495c31ec3a33951220eccbb0bbce901e", 0xef}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="6450cbcba8cf79267ffb87e55386a0a3e3369ded7ebb523bf57e69ac1f84d1e230c9edc200606e4ce59b2f606624985b497b37ef20f32960f5b8e47f66942851e3882d2bb9d9d67524ca4cf231938757cef8e6e963c0", 0x56}, {&(0x7f0000000840)="305c486561a4785dd4fbbfe753941958358df8a336a0eb3c9f2131b8e6b0f1561d731c702fd2acc8acbb8ce28ef7015e4c9bf8d91d2234a495fbf1f7373746e054fc603c2bd1c9bdf7f1d0f200060b8b41a81c3d44f545d001c24c7d82a635b1edb92834c92e1ac8bdeb0293e08a12a0640640ee21072c1b5d4701e958705573e165c597ce905e0bc50ea34cdcec54c540747ace69e52952be701b60ff423e8c589beb58689df847766b3a466ff9f3d4cfe65ca80301d3213b325fdae21444e4844f91964cfe113b7542c980b2d003260edb5b8d5e4d2865df80114ac1481f4a5bc69a67d449aa", 0xe7}, {&(0x7f0000000940)="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", 0x1000}], 0x7, &(0x7f0000001b80)=[@rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xe8, 0x4000040}, {&(0x7f0000001c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d00)="43206a91b2e8da432f39efed2768acce755f949a38e4c2495c76fc8b7ca49573c8035fe5ea966b507a724d88b5ddd0539ff2fe19466b9cc39d015eecca21e5daaaf8e591aa2b072700ccde3b1f4d22fe0af714fba5d24adaad564e99eda01ac691bf4ded812835a38e50ba7a6ca8d9c1b8c88b6a2c7ad62222d8e642906b5a9b07dd318452d0ab1869a3e2be4b0fd20336858f8ab98130c40482918e2b2da2d353dad70f6b53b3acae651187ae6cc5034ede81d203d12ec8104803ffd6690d16dd815aeafd22268926cecbc2203f05eb3b7ba4cc5114c4595fc8613221cf6d20254cdf88f5c332bd760ad5942d", 0xed}], 0x1}, {&(0x7f0000001e40)=@abs={0x3, 0x0, 0x4e21}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)="1f77c8b5a7ac285d8c2f16e205c94a227cde9e13023764ef03abe763fc6cf5a6976b021155d87ca75b27404ecabf015948cd60b1362b60c54538d30aa48b74e287a9dcb17d8fccc0a2ac2f6987131a9ea6b8704e8cf8573aaf02ce5aa9042ec812533d255292cb123de7927fc4d909ee472cff7780d407fa2ea124d7e1b07d48bc67113a9d569ac7f2980d730a8e", 0x8e}, {&(0x7f0000001f80)="87671321c49f8b09629102734dfb0b0beb88a5cd0ff09761bfb6c0eb5957601e54fd7e629abad5b7a0ab64e66173996db80991cbdbab15985d28696588ae189f5f5afa8e94590ce461dabf1bdb1ce9e10c1e5cb6135666b5a037a819b043b3c16d43fde6e434ce899f14052ddbccdc6066c6589e759c5e447f47c165e6c98208c90c58bf3f7084dfab54a1edfb81ac81b5de4a5415ff99fa9cac8c65f6ba632a05969fee433f4fe37f420a97a1ed022c3d6ff3af10c3f9601616c14dc4f505956f8420e0b67fb9e7", 0xc8}, {&(0x7f0000002080)="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", 0xfe}, {&(0x7f0000002180)="7e52157d5d252ccc09130be8feed5ec829092492769f7ef10ef2f78e9fb694af1952fb7fb6b914661b6c3b7b076982a5201021f09465ffef7548772b995a2b8af5bc1db8ce99edc8072ad78315a8421f98a04942f9e95e3918b2c13b4804265bc3fbad3cca5973beff2f075396895e5181a22dee8d10abf4a835af9e8af9dcf7e90c505efd7902789535af026e1a3ab92dcfe0c03934b2e29d9c2f4ac81477fb0e00bf17deda8edafcb2869ecae251944f594f6ab411fea7c9039fd45157928c5648a26fe314572c2a81d9bca7ede9bbacfa2bf6", 0xd4}, {&(0x7f0000002280)="f9119385057f6e3350e424bc16c0a19daf18c5a034fe4ce4d8e39eba", 0x1c}], 0x5, &(0x7f0000003a80)=[@rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x48, 0x1}], 0x3, 0x4000010) r7 = dup3(r2, r5, 0x0) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x1, 0x6, 0x1, 0x1, 0x7, 0x0, 0x2, 0xff, 0x4}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, 0x3, 0xe1464fb) shutdown(0xffffffffffffffff, 0x1) 16:27:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10, 0x161}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x8, 0x3, 0x0, 0x800, 0x4, 0x1, {0x0, r6}}, 0x3) syz_io_uring_setup(0x1b65, &(0x7f0000000180)={0x0, 0xa544, 0x10, 0x1, 0x66, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x2e4a, &(0x7f0000000200)={0x0, 0x434, 0x10, 0x0, 0x1c0}, &(0x7f0000ff4000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0), 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) mmap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r9, 0x56e1a000) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000010200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xfffffff5) 16:27:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000fffffffb0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000020200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x2000000000000) 16:27:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10, r0, 0x0) syz_io_uring_setup(0x31f9, &(0x7f0000000180)={0x0, 0x8f7e, 0x8, 0x0, 0x37e, 0x0, r0}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10, 0x800) r9 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x1f, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r7, r3, r8], 0x5, 0x0, 0x1, {0x0, r12}}, 0x5) 16:27:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x24, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x5628, &(0x7f0000000200)={0x0, 0x57d4, 0x0, 0x1, 0x211}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x8, 0x7, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0xb386) shutdown(r3, 0x1) 16:27:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000fffffffe0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x4000000000000) 16:27:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000004020200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:24 executing program 3: listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=""/224, 0xe0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xd, 0x8001, 0xb5, 0x0, 0xb912, 0x2, 0x5, 0x3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) io_uring_enter(0xffffffffffffffff, 0x44f96, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x6696, &(0x7f0000000180)={0x0, 0xa0aa, 0x8, 0x2, 0x1eb, 0x0, r0}, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r6 = signalfd(r3, &(0x7f0000000340)={[0x101]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a3b, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x10001, 0x1, &(0x7f0000000400)="6481d885317cea351d4c72962826044558da7d3c192fe50c786c10e113e7de92ba7d0fa05279337d280d8edda260c3d087bd862cf52ee6cbd51b58eb0786a228557b912da6a4bb78347137d269edb385e73bc3b0f6aa81b9ef6b79b889796fff51495c8a468db6eaff710d32ec57748c8c93b3a7b9c94fefb1dccee9a5de95ffef2aa18148c2817d886d3bdb7471a7dbc4ee", 0xff, 0x0, 0x0, {0x3, r11}}, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x4b88, 0x2e0b, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r13, r5, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x4003, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000030200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000001ff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x4c}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone(0x2000, &(0x7f00000002c0)="c1bc5f1ca5190599424fb97ad86a26909ef028a2c10dcfcc2fb15d8a2da4cb53e1da7c05f249fc8d92133b140c46ffc1635394be3350f333853306931e0fee91dbe05d9b9296be6a081da20fc1a77e11269ae3debe7bd670c9d9569b6c5d1f1a1b30294bfaeb2c3fda816794bbf68e6f5c25d33031fc0cf201477288a7bd4c44a8cc2befa4fb0c633c45552418cd39ac895f7d", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b144b097eaa769be6d05c41bd34e677d114b65cb499374a8db38f8c44f7b7d9ce423c26f45959cc387cf4c2e1fea4b7a3dfc8ea6a7efefe4", 0x41}], 0x4, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x34) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x30000000000000) 16:27:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000040200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000005ff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x1000, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x40030000000000) 16:27:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000050200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r8, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r6, 0x0, &(0x7f0000000380)="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", 0x1000, 0x40000102, 0x1, {0x0, r7}}, 0x3) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r2, 0x1) 16:27:25 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x38000, 0x8}, 0x0) r0 = syz_io_uring_setup(0x6b36, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x0, 0x7, 0x0, 0xff}, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000005c0)='.log\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x3e, 0x9, 0x7, 0x0, 0x3, 0x2000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x4a060, 0x7, 0x10000200, 0x6, 0xffffffff00000001, 0x8, 0x9, 0x0, 0xfffffc5d, 0x0, 0x8000}, 0x0, 0x8, r3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x48001}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r4, 0x0) fstatfs(r4, &(0x7f0000000680)=""/4096) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000001700)=""/209, 0xd1}, {&(0x7f0000001680)=""/106, 0x6a}], 0x3, 0x1f, 0x1) 16:27:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000060200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) getsockname$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x6e) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000000000fff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:25 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) getrlimit(0x0, &(0x7f0000000080)) fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xfeffff00000000) 16:27:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0xf3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x101) shutdown(r4, 0x1) sched_setattr(r3, &(0x7f0000000180)={0x38, 0x5, 0x23, 0x86, 0x1, 0x80, 0xe47c, 0x0, 0xb6c, 0x6d1}, 0x0) 16:27:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000004060200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000ffffefff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x100000000000000) 16:27:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000070200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000ffffffff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x200000000000000) 16:27:26 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000140)=0x307c, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r4, 0x0, r3}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd_index=0x4, 0x7, 0x0, 0x0, 0x1, 0x1, {0x3}}, 0xc000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000080200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000001b00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x1}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000140)}, {&(0x7f0000000380)="80a1c845cbb67268782a39299c416461ec66f54877273ac6c73f025b0f5f70bc5e68815fcaa1135e168c07b963f51f039eac84050bf0b04221043d053f9f83b9f40c454d77bc0a43b7ea482b0a837b52a71d33d9c13f114707f57eebdb4894fe877ed7ded95a2fa5e23681ff0e5c0720c7d6fc126923d3dbc115ac97d754330b5774e498b82c449c131f49cd732341df7ce388bcf1081034638f8a18ae92173a308218d9120279a98e7c9540821cc4f5cb1ff60d9b80e1f96dd1d2d802cb94c79e38091e2b806ed07e5ee3006e", 0xcd}, {&(0x7f0000000480)="d849eb2a437809da7cc6f64cc6231ecab5c1fd0aef1440477c909943b04d93300fb69a79a06b6e74cf4d7dbbfe8f663d5246ed68e09868f23b1bd4e319a72f63293d86c42352793dae860d20e01d5ff6a40d496032003b661f6234f187889841912f54ca37ea421a3e2a0c091c6a64f8c902eff50cd3bf39900ea4b0c059b6c9eaa5026841117c0f45dca63645906229dacde9360c3865196790d1ba698b2ad7b622f28c91dcc005dd3501772ac409c94985e7a0736eea383116bb2ddcccb9e0fbe9d3615b91be0725c87a43ac8b0bb936", 0xd1}, {&(0x7f0000000580)="119af74326c83f64cd", 0x9}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f00000005c0)="374431b31a8df82c1ad906c28039df0f3e3b9a291516fe335ce77397157f53fad50290d7d759aa5bf4f836232f28f3a24f687386956418d8b73f3e8023d9016bf6b43c3a191bb1d487b75c41df31e52f6b09e105334df89711d7ffdcea19599d933d890c6675821e3142933967db17a12cb9aa641b9534de48036fff7e", 0x7d}, {&(0x7f0000001680)="782ed768114c33cd09ee7851bd296491056f3e31efc62e4068016885cb387faee5ee8987cdcb8f802af4a24cad8b68545189831a29d1683ed900fb02147e4990b894ac5c3f7127065a4557bc17999522638b1233d9b1e0eb05558cef470a0b495d88ad56b75f9babe3d1deb31c066cb1447dee9fe20c0a3acc076a5647111ce78eaf633b029663bd50cc76a41bd89b63d500292db50f3f107892c7dca9ea7ec602", 0xa1}], 0x7, &(0x7f00000017c0)=[{0xb0, 0x3a, 0x9, "4dfcc0d5b3ecd70be5d55312980b10e2282a8f7724d4d1eb796ddca41318f3daec0453c5065c7f04cca8802dc7c3a743a3288c25623a4a7c0e23f2fa0ac9c072e1ba0711f7dfe33f492ae3358ec2050899a93dc39c28f43cd2e5d5fb02b59501fe0b7c0f9d9236eb4086e2beef76788a329068eae9f27fea86e2a0362e8551de97b29e53b42321c7a9890c05f83a3cfdecf34163086d7e869594"}, {0x80, 0x118, 0x10001, "39c220edcbabc6554ed963c63a16730f41de31980acf22f513d2cca4c2863cf661748dd4a031cbdab5abef19a65794fcb5753a5e381a665b96c31385196a873c4410ee37826155d366ea4e48d2a8cb8cafce5c71e5b2f35d2b1f555ab4443e6f07bd43ee88272810451996e46881e66a"}, {0x50, 0x0, 0xfffffc01, "a993992364bd0af26b2c3750c7a04e572448857820ea7830e68287ef48fd8653e263264e785049af6a0b66911f48146cb6bc97e8cf388d9a3e221a"}, {0x20, 0x1, 0x8000, "158a25147b258e976cf5bfb849"}, {0xd0, 0x29, 0x3f, "9e994aef1d3f778297ba9f12189faa7c2bf0285f1a98a3e6dacb9f3e5f16539f18acecc72403b265de98ca6c49e3060d0f959130cbbd6c9029db43fc837fb26b6836794763d5701f99997255ee2d9380b1924b0d0ac1f0f4b8c9427e79661d0040a22a72bdcd1db3145f331c7bd9e053cc1ac5c6c6ad6b17487cd91e6c6cfc0db1d3e5dba53e90ba62c671a13b673768b3e3619af6cfa26826c066da4416b1cadb625621c9769a13b77215706fa90798ca59f6d426fb20c743"}, {0x88, 0x11, 0x3, "b22d302a89a8794a6398327b4d566a919be3e0bef89bfa85e4ceba96112c8c7084bfda1d63ed51ba2669a013223a6037851b1d057af12f392c6f007b9bc0bac615c9bb7a913ff50502a7134c8545c3fc843a9a4e9a7492c468d38a8065833ce707435ae2cdca105a624367affddcdc4814bb"}], 0x2f8}, 0x0, 0x804, 0x0, {0x0, r8}}, 0x7) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000080)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) fallocate(r9, 0x48, 0x9, 0x4) shutdown(r10, 0x1) 16:27:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000007ffffffffffff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:26 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x7ff, 0x1000, 0x0, {0x0, r9}}, 0x1306) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r8, &(0x7f00000007c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000680), &(0x7f0000000780)='./file0\x00', 0x40, 0x6000, 0x0, {0x0, r9}}, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x2010, r5, 0xbf125000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r11, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_PMKID={0x14, 0x55, "a69d68c390f9c48c063668f6d02832a2"}, @NL80211_ATTR_PMKID={0x14, 0x55, "374b956e6a6fe332480f9aa3d024894e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d1fe17925838"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="0e8dd0d183ed"}, @NL80211_ATTR_PMKID={0x14, 0x55, "146680fc0b13fcee7b03b5082e0f7525"}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x671f, &(0x7f00000003c0)={0x0, 0xd479, 0x38, 0x3, 0x5e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00002d1000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x400000000000000) 16:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000090200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x600000000000000) 16:27:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000007fffffffffffffff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(0xffffffffffffffff, 0x1) shutdown(r3, 0x1) 16:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000a0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:26 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:26 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) r8 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x6000, @fd=r7, 0x201, 0x0, 0x0, 0x4, 0x0, {0x3, r11}}, 0x81) 16:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000b0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000ffffffffffffffff0000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x700000000000000) 16:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000c0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000020000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:26 executing program 4: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x800000000000000) 16:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000d0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(0xffffffffffffffff, 0x1) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000030000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf00000000000000) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000e0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="122544314accb88b7624b7caa925d0409ac26369025199f83de0f2c1d80a8a402098fc545a1c8e8f843315d1d5fa6f1219c358a4ac452821875a6d36b538ecbb95fc93decb8d996a4dc66d", 0x4b}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x220}, 0x24000005) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x13, "8e09a2"}, 0x5, 0x3) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) mmap(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x100000c, 0x4000010, r5, 0xf5d12000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r7, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r8, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r8, &(0x7f00000001c0), 0x0, 0x0, 0x80000, 0x1, {0x0, r6}}, 0x0) 16:27:27 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x840}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x5020, &(0x7f0000000080)={0x0, 0x2817, 0x20, 0x3, 0x2ec, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x9, 0x75, &(0x7f0000000200)="dfcb3c0930a39d66b5d9cbfb", 0xc}, 0x1) dup3(r0, r3, 0x0) ioctl$FIOCLEX(r5, 0x5451) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) r7 = getpid() sched_setattr(r7, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x7, 0x8001, 0x1f, 0x8, 0x1, 0x7fff, 0x9}, 0x0) shutdown(0xffffffffffffffff, 0x1) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000f0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x1100000000000000) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000040000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) shutdown(r0, 0x1) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000100200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x2000000000000000) 16:27:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) syz_io_uring_setup(0x3434, &(0x7f0000000180)={0x0, 0x2301, 0x1, 0x0, 0x350, 0x0, r0}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x7a0a, &(0x7f0000000340)={0x0, 0xddad, 0x4, 0x0, 0x379}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r9, &(0x7f0000000400), 0x0, 0x0, 0x80800, 0x1, {0x0, r13}}, 0x5) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x8) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000050000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000110200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000060000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 3: prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000380)={0x7, 0x4000000093}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x4479, &(0x7f0000000200)={0x0, 0x59d1, 0x0, 0x2, 0x7b, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) r6 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x7, 0x2, 0x0, 0x1, 0x2, 0x1, {0x0, r9}}, 0x5) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000120200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x8000000000000000) 16:27:27 executing program 2: prlimit64(0x0, 0x5d0c77d525c52111, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x20003}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000000)={0xfff, 0x9}, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10}, 0x5) clone3(&(0x7f0000000440)={0x4200000, &(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x26}, &(0x7f0000000340)=""/66, 0x42, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) prlimit64(r3, 0x0, &(0x7f00000004c0)={0x0, 0x8}, &(0x7f0000000500)) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0x0, 0x38) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x8, &(0x7f0000000740)={0x10001, 0xfffffffffffffffb}, &(0x7f0000000780)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4002a6e, 0x4, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = syz_open_dev$vcsa(&(0x7f0000000540), 0x7f, 0x0) syz_io_uring_setup(0x7b29, &(0x7f0000000580)={0x0, 0xb090, 0x10, 0x3, 0x23, 0x0, r6}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000680)) 16:27:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xc74d}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000070000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000a207601b0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = getpgid(r0) tkill(r1, 0x23) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x6, 0x80, 0x7f, 0x9e4, r0}) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x14, 0x9, 0x9}], 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r2, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x803e000000000000) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000080000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000001f0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000200200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x53, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x8f}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r5 = dup3(r0, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d3000/0x3000)=nil, 0x3000, 0xe, 0x110, r5, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000080)="5e6cc25c92afc9913b51294b36928288ddde2919415df836c2d7fb90d6125d703bea", 0x1f, 0x0, 0x0, {0x3, r7}}, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r9 = dup2(r3, r3) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r12 = io_uring_setup(0x5eeb, &(0x7f0000000380)={0x0, 0x4dc6, 0x10, 0x1, 0x196}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r14 = syz_io_uring_complete(r1) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000080)=[r8, r9, r10, r3, r11, r0, r12, r13, r14], 0x9, 0x0, 0x1}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000090000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd=r4, 0x2, &(0x7f0000000200)="2cc64c5e717856e9b64bd254fe771f95bae9c25224c88c889c8cdb6a1f6cc6923b915ef70c854c9ccdb6b2f62f2d78b91cb7560cab8d2aeef61520b0c1ac32f7e07d151ff2087ef5dcc52011a11e93265f42871b920d5052694769", 0x5b, 0x7, 0x0, {0x0, r10}}, 0x10000) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x6, 0x2, 0x1f, 0x3ff, 0x2, 0xfffffffffffff001, 0x6, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) sched_setattr(r11, &(0x7f0000000180)={0x38, 0x2, 0x25, 0x9, 0x81, 0x9, 0x0, 0x81, 0xf78, 0x200}, 0x0) shutdown(r4, 0x1) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc000000000000000) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000010200200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x5fbb, &(0x7f00000002c0)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000220200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000c0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xc03e000000000000) 16:27:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0000080037d3438cd80765083a0152b46e000000000040000000000000000000f1f1c4100b5414c709e907d4e90f00009123fa3da3c3e3b42268a6443ced46ec7bdf4a403b3d4f9f9e49c423326325670e2ed1ae0981368d0f28dbc562d7bc2900924b28ae781acc070000000000d9a339c81c45ec656a22fda5411a08599ba212058de65729e85074517d064c2e4ac80a40e363f4b848d925b66f5227aadfa0a428ebef1e25d4905cfc9a34da9b6dfcb99e4350fd34a0f82330f4e8381039e0f1d2c1822dc19ccf81a72bf1a08559b4b777197445fa82287c08f740ea7e3325e9291d7b94582db68acb1676f780f5bd08ccaef2c972a01f739fc635dab060afa0c1ccea05412003d59cb0a597c55c8802f407381d5f7f19e7879a79ff06d02a242d3b7efb01080cb06038853aaf0f82f27a4f942e5f93cf63a3aa291e5dd665069eb97ba900"/340, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x574, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1ff, 0x8001, 0x4, 0x71, 0x2, 0x92]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x24, 0x3, 0x60, 0x30, 0x12, 0x4, 0xb, 0x60, 0xb, 0x3, 0x0, 0x3, 0x48, 0x9, 0x9, 0x3, 0x3, 0x1b, 0x4, 0x18, 0xc, 0x5, 0x60, 0xc, 0x1b, 0x6c, 0x9, 0x60, 0x24, 0x18, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x293, 0x1000, 0x20, 0x0, 0xfff, 0x3, 0x100, 0x9114]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x8}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x4}, {}, {0x2, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x1}, {0x7, 0x8}]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x4, 0x7}, {0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0x0, 0x5, 0x100, 0x3f, 0x400, 0x1]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x2}, {0x7, 0xa}, {0x7, 0x1}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x15}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {}, {0x3, 0x8}, {0x1, 0x7}, {0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x1}, {0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x9}, {0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x6}, {0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x7}, {0x6, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x30, 0x16, 0x9, 0x60, 0x36, 0x16, 0x6c, 0x4, 0x1b, 0x1, 0x30, 0x4, 0xc, 0x48, 0xc, 0x0, 0x5, 0x60, 0xb, 0x36, 0x16, 0x6c, 0x18, 0x18, 0x1b, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x4, 0x38a, 0x4, 0x5, 0x98, 0x8, 0x8001]}}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0xc, 0x24, 0x9, 0x30, 0xb, 0x60, 0x2, 0xc, 0x5a, 0x36, 0x2, 0x60, 0x12, 0x6c, 0x16, 0xb, 0x48, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xdc01ba3fd4b34307, 0x36, 0x60, 0x1b, 0x12, 0x30, 0x30, 0x6c, 0x30, 0x5, 0x6, 0x16, 0x3, 0x2, 0x4, 0x17, 0x60, 0x4, 0x1b, 0xd62e6560d725c4c5, 0x30, 0x48, 0x1, 0x30, 0x30, 0x12, 0x2a, 0x60, 0x5, 0x9, 0x30, 0x60]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8001, 0x7, 0x40, 0x78b, 0x7f, 0x3, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4000, 0x21, 0x7, 0x80, 0x1, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x3ff, 0xf599, 0x6, 0x200, 0x9, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc8, 0x9, 0xbbb, 0x4, 0x7, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x101, 0x80, 0x2, 0x5, 0xfff9, 0x8ad6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1f, 0x48, 0x9, 0x150, 0x5, 0x1000, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x20, 0x1, 0x200, 0x5, 0x1f, 0x6]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x8, 0x1, 0x7, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe7a, 0x3, 0x8, 0x1, 0x3, 0x2, 0x2, 0x8000]}}]}, @NL80211_BAND_6GHZ={0x114, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x7f, 0x9, 0x0, 0x0, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x2}, {0x1, 0x3}, {0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x6, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x4}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x2}, {0x5}, {0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0x7}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x1}, {0x0, 0x2}, {}, {0x4, 0x2}, {}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {}, {0x6, 0x7}, {0x4}, {0x3, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x9}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x3}, {0x6, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x8}, {0x4, 0x3}, {0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x16}, {0x6, 0xa}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x400, 0x200, 0x200, 0x8, 0x401, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x3}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0xa}, {0x6}, {0x2, 0x8}, {0x0, 0x8}, {0x7}, {0x2, 0x7}, {0x4, 0x9}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x8}, {0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0xa}, {0x7, 0x3}, {0x7}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x5}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x9}, {0x0, 0x4}, {0x1}, {0x4}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x3}, {0x1, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x5, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x3}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x8, 0x6, 0xc98, 0x2000, 0x5, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0x9, 0x401, 0x8, 0xea, 0x19b8, 0x9719]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x6}, {0x4, 0x6}, {0x3, 0x6}, {0x3}, {0x2, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x9}, {0x5, 0xa}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb73, 0x0, 0x3, 0x6, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0x1ff, 0x40, 0x0, 0xda, 0x3ff, 0x1000, 0xadcf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe7c8, 0x6, 0x101, 0x1, 0x8001, 0x3e, 0x8, 0x2]}}]}]}]}, 0x574}, 0x1, 0x0, 0x0, 0x4000}, 0x4000096) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x32da56fe5de1c38a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x1d4, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x2, 0x3, 0x0, {0x9, 0x2, 0x0, 0x277, 0x0, 0x1, 0x1}, 0x8, 0x80}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x5, 0x0, {0x800, 0x80, 0x0, 0x20, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xa95, 0x80}}, @NL80211_ATTR_FILS_KEK={0x40, 0xf2, "9cc5406d90a0f2dd4dc9fdc9c1136aefe224157bd2612976baf80931a89cef154db5775a270a08dcc7c78c90bb25a9740fd44588ae0aed06726a181b"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8001, 0x7, 0xf001, 0xfff, 0xf139, 0x1, 0x1, 0xfffa, 0x69, 0x0, 0x11a, 0xfff9, 0x401, 0x4, 0x2, 0x6]}, @NL80211_ATTR_IE={0x105, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @mic={0x8c, 0x10, {0xf3a, "2133b3424639", @short="bcf9e7971d14a175"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x30, 0x80}}, @tim={0x5, 0xcb, {0xe7, 0x6a, 0x7, "4dec5f5364b37223b1bf770c03f95bf5b572dcb9a596b412b4e5274b5b03935d1dcb6fa969f25275207fd6fd0529c29cbd724b1c696f2bcc40e8eb1f11228cfc6b007ac8135b1d3220abd4016fc8e4069644d979546ca34d154f5687db17046e159044f8eff7071dc351797667fab946b2fdf37c57d10725f7061488e6194e3cacc7210ef4161b7b8fc6d6ea1ac481719160370c1bf20d82452fc7e9e713128156077551cad0408b6b1897cdc0512bbda6d896bbd8f96d29081c2e281a9773b16d25847185dc3e81"}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2a, 0x20}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffd, 0xb3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r9, r7, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r8, 0x100000001, 0x0, 0x101, 0x5}, 0xff) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r5, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000d0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000250200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:27 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff127}, 0x0) tkill(0x0, 0x38) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000013, 0x8, 0x20, 0x0, 0x2, 0x8acd, 0x100, 0x412}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0x7ffffe, 0x1000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x84b, 0xb9ca, 0x0, &(0x7f0000000000), 0x8) io_uring_enter(r0, 0x4f96, 0x0, 0x3, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xe03f030000000000) 16:27:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) splice(r4, &(0x7f0000000000)=0x80000001, r5, &(0x7f0000000080)=0x213, 0x52, 0x5) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() sched_setattr(r3, &(0x7f0000000000)={0x38, 0x2, 0x52, 0x6e24, 0x4, 0x3ff, 0x8, 0x8, 0x7090, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 16:27:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000002e0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000e0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:28 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bc66f5b14ad86262e355f1c0812476668e9b90c479562301bbacc10d7443243879e70c56f17abec8383c35a14f075e3e2527a04f2d6f9999a9982feebd1b7421", 0x40, 0x90, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @mcast1, 0x8}, 0x1c) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:28 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) r5 = gettid() prlimit64(r5, 0x4, &(0x7f0000000000)={0x1}, &(0x7f0000000080)) eventfd2(0x5, 0x80801) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000012e0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xeffdffff00000000) 16:27:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000100000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000320200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 16:27:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250100000034000c800c000b8008000a00af6400000c000b8008000a00175300000c000b8008000a008e4000000c000b80080009008790bb3840000c803c000b8008000a00d5e9000008000a00b1ee000008000900eb89480808000900c297da4308000a00eb15000200000008000a08000100030000001400048005000300060000000500030002000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) r1 = syz_io_uring_setup(0x10187, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000004c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r7, &(0x7f0000000200)=0x80, &(0x7f0000000440)=@caif=@dbg, 0x0, 0x80000, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x4) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r10, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r10, 0x4, &(0x7f0000000000)='&\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) 16:27:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000003f0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8482289764fc6d7b}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:28 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0}, 0x5) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000110000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xff8f000000000000) 16:27:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000400200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:28 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x64d9, 0x0, 0x800000, 0x10000000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000800400200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xffffff7f00000000) 16:27:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000120000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000480200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_setup(0x5f1b, &(0x7f0000000200)={0x0, 0xa496, 0x1c, 0x1, 0x1d5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x9) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) shutdown(r0, 0x1) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000004c0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000290000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:29 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0xffffffff00000000) 16:27:29 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)) syz_io_uring_submit(r0, r1, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) r5 = open_tree(r4, &(0x7f00000001c0)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x105000, 0x23456, {0x0, r9}}, 0x9) io_uring_enter(r4, 0x4f96, 0x0, 0x3, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000600200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r3}}, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000002b0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001600200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000002d0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:29 executing program 5: r0 = syz_io_uring_setup(0x64d7, &(0x7f00000001c0), &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x60}}, 0xeea5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) mmap(&(0x7f00002cf000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r9, 0x57280000) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, &(0x7f0000000080)="52e556550cbb8b55daf1eebe5f2a482165aba25df4733311207366c667966b81ac9dc847fac5f84ff37abb", 0x2b, 0x10040, 0x0, {0x0, r8}}, 0x7fff) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r10 = fsmount(r4, 0x1, 0x7d) sendmsg$SMC_PNETID_ADD(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000080) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:29 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f0000000340)="09fc6d7b4829d2859e6e9a02b60b8b5a61bc6cb6099ae107a9754a4b61e2d553b49597bf3d0f79c6c8caeae6d130059beba60c6da99bcfe8dd8b0a51de21feca98b78f47a3f0e2936dd5e7e190d1991bf4cd6f64971f9ac281bdb131c517489e5ffb4aaf38da7464f58a68f61f76839536a10541fece5abe720ce197da4c3d7b6eb48ac242"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r6 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r6, 0x34) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x80000000, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001610200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000040200000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:29 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4805) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000002fc0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/202, 0xca}], 0x5, &(0x7f0000000000)=""/56, 0x38}, 0x7fffffff}, {{&(0x7f0000000580)=@ipx, 0x80, &(0x7f0000000080)=[{&(0x7f0000001680)=""/83, 0x53}], 0x1, &(0x7f0000001700)=""/134, 0x86}}, {{&(0x7f00000017c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000600)=""/3, 0x3}, {&(0x7f00000028c0)=""/118, 0x76}, {&(0x7f0000002940)=""/39, 0x27}, {&(0x7f0000002980)=""/76, 0x4c}, {&(0x7f0000002a00)=""/76, 0x4c}], 0x5, &(0x7f0000002b00)=""/129, 0x81}, 0x6}, {{&(0x7f0000002bc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c40)=""/17, 0x11}, {&(0x7f0000002c80)=""/189, 0xbd}, {&(0x7f0000002d40)=""/46, 0x2e}, {&(0x7f0000002d80)=""/36, 0x24}], 0x4, &(0x7f0000002e00)=""/154, 0x9a}, 0x4}], 0x4, 0x40000061, &(0x7f0000003000)={r5, r6+10000000}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r1, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001620200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001630200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:29 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x6f, 0x9}) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:30 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000810200000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:30 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x1, 0x20, 0x19}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000200)={0x0, 'team0\x00', {0x1}}) syz_io_uring_complete(r4) 16:27:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() tkill(0xffffffffffffffff, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = timerfd_create(0x6, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd=r3, 0xe48b, 0x14, 0x5, 0x0, 0x1, {0x2}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x2e82, &(0x7f0000000180)={0x0, 0x2127, 0x4, 0x0, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r6, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)}, 0x3) io_uring_enter(r0, 0x771f, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r5, 0x27ad, 0x9483, 0x3, &(0x7f0000000200)={[0x9]}, 0x8) 16:27:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000680200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:30 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0xa, 0x800000, 0x8a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) tkill(0x0, 0x38) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x10000000, 0x9, 0xcd, 0xffffffff, 0x7, 0x401, 0x40}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000000)={0x38, 0x5, 0x10000049, 0x5, 0x1, 0x0, 0x2800000, 0x80, 0xffffffff, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) 16:27:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000006c0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:30 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x800000, 0x1a6}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:30 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000300000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:30 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = signalfd4(r0, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800) mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000002, 0x140131, r3, 0x745df000) syz_io_uring_setup(0x16bd, &(0x7f0000000180)={0x0, 0x40b4, 0x20, 0x0, 0x387, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000740200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:30 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000020400000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000400)={0x1, 0xfffffff7, 0x80, 0x8, 0x80000000, 0x3}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/152) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x3}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r11, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000001880)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r11, &(0x7f0000000240)={0x200100, 0x40, 0x19}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3) io_uring_enter(r1, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 1766.808817][ T4025] ================================================================== [ 1766.816945][ T4025] BUG: KCSAN: data-race in sock_alloc_send_pskb / unix_release_sock [ 1766.824939][ T4025] [ 1766.827263][ T4025] write to 0xffff88812b361a6a of 1 bytes by task 4053 on cpu 1: [ 1766.834870][ T4025] unix_release_sock+0x2bf/0x6f0 [ 1766.839793][ T4025] unix_release+0x2f/0x50 [ 1766.844103][ T4025] sock_close+0x6c/0x150 [ 1766.848326][ T4025] __fput+0x25b/0x4e0 [ 1766.852291][ T4025] ____fput+0x11/0x20 [ 1766.856269][ T4025] task_work_run+0xae/0x130 [ 1766.860771][ T4025] exit_to_user_mode_prepare+0x156/0x190 [ 1766.866539][ T4025] syscall_exit_to_user_mode+0x20/0x40 [ 1766.872009][ T4025] do_syscall_64+0x49/0x90 [ 1766.876523][ T4025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1766.882435][ T4025] [ 1766.884743][ T4025] read to 0xffff88812b361a6a of 1 bytes by task 4025 on cpu 0: [ 1766.892261][ T4025] sock_alloc_send_pskb+0x113/0x4e0 [ 1766.897448][ T4025] unix_dgram_sendmsg+0x478/0x1600 [ 1766.902553][ T4025] unix_seqpacket_sendmsg+0xcc/0x110 [ 1766.907932][ T4025] ____sys_sendmsg+0x360/0x4d0 [ 1766.912703][ T4025] __sys_sendmsg_sock+0x25/0x30 [ 1766.917661][ T4025] io_issue_sqe+0x236e/0x69f0 [ 1766.922587][ T4025] __io_queue_sqe+0xe7/0x360 [ 1766.927169][ T4025] io_submit_sqe+0x1695/0x3400 [ 1766.931941][ T4025] io_submit_sqes+0x822/0xe50 [ 1766.936627][ T4025] __se_sys_io_uring_enter+0x1c9/0x9e0 [ 1766.942086][ T4025] __x64_sys_io_uring_enter+0x74/0x80 [ 1766.947458][ T4025] do_syscall_64+0x3d/0x90 [ 1766.951860][ T4025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1766.957740][ T4025] [ 1766.960067][ T4025] value changed: 0x00 -> 0x03 [ 1766.964722][ T4025] [ 1766.967045][ T4025] Reported by Kernel Concurrency Sanitizer on: [ 1766.973194][ T4025] CPU: 0 PID: 4025 Comm: syz-executor.3 Tainted: G W 5.13.0-syzkaller #0 [ 1766.982904][ T4025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.992959][ T4025] ================================================================== 16:27:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000007a0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000060400000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r5 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r9, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2edf, &(0x7f00000001c0)={0x0, 0x5a5e, 0x1, 0x2, 0x210, 0x0, r9}, &(0x7f00002d5000/0x4000)=nil, &(0x7f00002d8000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340)) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r12, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r9, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@isdn={0x22, 0xf6, 0x20, 0x1f, 0xfb}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000400)="1f301b2c3029e482f067e425a24e826a60b9c44797aa9c64823db8da4785c1b97260c6a42088369b15904de99813cf4fd531c9cb433c28", 0x37}, {&(0x7f0000000440)="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", 0xfa}], 0x3, &(0x7f00000018c0)=[{0xb0, 0x109, 0x4, "65400e423dd525b2e906ecd0118114a2c06270744ecbe415b907214c55dfe17249c505b88ed119b49b73242aea42ad824d5a62b95e2a5322a6fda705b0d471dd15693572613a546bd926f65ceb2feb71f1fb9a1b7e9da4924c4daad05419a74118aca5d36a528444934a17a7cca0ef23d9db4b2f98143b24cc15f1db35988c4c5fe2b10f0924b4e6e9da836ddd7ee01c5aca62d4a26813f7c6858c88f4a4"}, {0x110, 0x108, 0x40, "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"}, {0x68, 0x118, 0x80, "e06ece41b14bbc9a97d2ec1ccfe689890eaf661db672d6cdf6284ba36e588b59d77783c8aa4adaf381d2dc1c6e130e31b49822af02d057d4f7c1c58bcc8ce31d98e485c4734913e8b1ba199877c96ff2f62fff4b957f5720"}, {0x68, 0x88, 0x0, "641be37deacd80e88d01de2afb142ffdfbe37911bfeadf6c6fd4439a2fbbe59c1bfd42a458920de43e1deed11bba60f2586f099fcd2cdc5dceb267a7e1aa909ad9a90190fd3cbab3857ff1fd9e0fe3b524ea47"}, {0xd8, 0x119, 0xfffffff7, "7f1eb9aa361d76371c5d96e725bb3ef33b1bb3a671f8d58ab6f8bcf1f3696ab0124a30ce25d2104f02f3978ccca0026523d7dc6d8eb9620640d999337b0702eedce96af1f745b76f3b283c75a577e3770586413994358f50e5af79b8bdbf0a62645adfff31f196a2e3e703803bfba5ea3b88868cec5e30c4ce053fba9b4e3068fb176cc41715c81d5a8449ba2f241d0b6aa2f973d617eba6e3d5352735d2d942b5732e6cdd8aaafc8023e5c2c14cf0b26f1748dcc705105fe74bbc79422c20816f"}, {0x18, 0x29, 0x3, 's'}, {0x18, 0x101, 0x100, "690c2f72066bdcdb"}, {0xa8, 0x10e, 0x4, "c34d138122aeee05dac60746048de882575a37a20b04d5f9bcdecbc3bded75c075d038ad12b8127bf2697116c5ce65a76456748497cb0899c650420170a2a895a977b3a18d3521c865b680e097af6d8c7643a946d04a77af5409b81fa62b100b7d24b0323854a352745af3bacd6d16414fecf9721d26205a837764e3eb6036a02078f1dad4565eeddaf6e234bfe032a58b"}, {0x28, 0x11, 0x9, "0016515b4b992f7eb76e710de93a0346887b"}], 0x468}, 0x0, 0x4000000, 0x1, {0x0, r13}}, 0x2000) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r4], 0x2, 0x0, 0x0, {0x0, r8}}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000480)=0x3, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_setup(0x352d, &(0x7f00000001c0)={0x0, 0xec2f, 0x2, 0x3, 0x281}, &(0x7f00002d2000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000340)) socketpair(0x15, 0x1, 0x1, &(0x7f0000000380)={0xffffffffffffffff}) syz_io_uring_submit(r8, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r9, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, 0x0, 0x81000, 0x1, {0x0, r7}}, 0x2) statfs(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/234) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:31 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000680)=""/251, 0xfb}], 0x7, &(0x7f0000000780)=""/163, 0xa3}, 0xffffa0ac}, {{&(0x7f0000000840)=@rc={0x1f, @none}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/215, 0xd7}, {&(0x7f0000001b40)=""/113, 0x71}], 0x6, &(0x7f0000001c40)=""/87, 0x57}, 0xf8a0}], 0x2, 0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x1) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000007e0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000080400000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001840200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x9, 0x6, r5}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x3d04, &(0x7f0000000180)={0x0, 0x5103, 0x10, 0x0, 0x3c7}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r7}}, 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ffffff850200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd=r3, 0x901f, &(0x7f0000000000)=[{&(0x7f0000000340)="eb36df8188b481bf60a562c1f6364857b708f15a1addde28d7e9d7c40383f20e59a81c158c2087fecacb103abc095716b460a912f9f056270cdf6d199ae28a0997483c25c5724bfa4d124f58599c79879b41ee513f450acd180d591f52ae2755f01551d5a197d03e83d5d32d3dadba8ffbee5b14b6069f9b008b786e579171ea122e59027cd9f5a61693b5eebf375bdc8a82d3b6954b3a2f33904875a199b8257e83373f468d3d49e2e6a5c98331fe78e665c99d22514b1d369a203d75b8f10c7e1cc63dc753bce1e0d87876deb4421b0fc5fd07f19ed252f3b5eee5c38579bfbff9526b26992701462f", 0xea}, {&(0x7f0000000540)="fa5098a61e879a152f4d2fe4c752ed02a4c530109744bae46b2752e268b00c0e8074acb23fb44754fac19bd2d2cd6093cd4190edee0adfeac59e6a9335a894eafc8cbe8e24e5b0e51a61eaec9600c17deada98057158a680e1be4a5e4ea73152583db16fa16c52c35b403e902131b12ba43eab78d7a685c612b1df8f4eb3b025ae827552a4a95289bd6c7f4ace2b1f12c370e99e6c12a8e49163ca4a7a5ce8a3cd1957c4d0e0e1da9811b10a193393017f5ffd59dc0ee983bf4798ad3281d999f2cda7", 0xc3}], 0x2, 0x12, 0x1, {0x2, r4}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x86, 0xa, 0x1, {0x0, r4, r0}}, 0x3) shutdown(r3, 0x1) 16:27:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000500000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = mq_open(&(0x7f0000000000)='.\x00', 0x800, 0x4, &(0x7f0000000080)={0x4bb, 0x56a5, 0x800, 0xfbb}) poll(&(0x7f0000000180)=[{r0, 0x1400}, {r3, 0x1000}], 0x2, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000044}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001860200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:31 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x60e980, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000340)=""/187) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x42a3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) 16:27:31 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9e9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x404}, 0x1}, 0x0) r4 = fork() sched_setattr(r4, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x8, 0x10000, 0x2, 0xffffffff, 0x10000, 0x7f, 0x4}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400, 0xd0, 0x9}, &(0x7f0000000400)='./file0\x00', 0x18}, 0x5) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x74d0, &(0x7f0000000480)={0x0, 0x9dbd, 0x9, 0x1, 0x8000006a}) dup3(r5, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_setup(0x42ea, &(0x7f0000000380)={0x0, 0x2e17, 0x1, 0x0, 0x2f5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000001890200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000ff0500000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) syz_io_uring_setup(0x9bb, &(0x7f0000000180)={0x0, 0x5140, 0x20, 0x1, 0x39a, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x2000, @fd_index=0x4, 0x4, &(0x7f0000000700)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000680)=""/69, 0x45}], 0x5, 0x10}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x6040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1e4b01f768be5dfe, r6, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ffffff8c0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r3 = syz_io_uring_setup(0x453e, &(0x7f0000000180)={0x0, 0xa762, 0x20, 0x3, 0x1e8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r3, 0xffffffffffffffff, r4, r5], 0x4}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000000)='}$\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x34d1, 0x7806, 0x1, &(0x7f0000000380)={[0x8]}, 0x8) 16:27:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000600000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)="658bc80e69a5df0fdeb5e1893c91a4e21e2d9eed912c6b200ac29d88c4c9618253cec0365714ea7e12b01726426ccf541831375d81b3a9cd7677648974d4ee08ddcddbad7ac54c5688cf54401e693c02945f23322faee143e4", 0x59, 0x40000000, 0x1}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x80000000) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x10, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x9, 0x5, 0x0, 0x3}, 0x1870) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r9, 0x1) 16:27:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000008e0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 3: prlimit64(0x0, 0xf, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x1, 0x1}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}}, 0x6c592a02) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:32 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd=r3, 0x5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1}, 0x2) 16:27:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000008f0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000040600000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000900200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 4: nanosleep(&(0x7f0000000000), 0x0) clock_settime(0x2, &(0x7f0000000080)={0x0, 0x989680}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7, 0x2, 0x7d, 0x0, 0x0, 0x3ff, 0x40024, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x80000000, 0x1}, 0x40010, 0x7ff, 0x8d2, 0x7, 0xd3, 0x1, 0x7fff, 0x0, 0x8, 0x0, 0x20}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x100010, r4, 0x41b43000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:32 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x69cc, &(0x7f0000000180)={0x0, 0xaa89, 0x2, 0x2, 0x1fe, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) 16:27:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000910200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000700000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000920200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2f7}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000ffffff970200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@generic={0x19, "7624a52f52690a7f34f3752c7278212b53a10b54054adf508ae85602ae84b4f14703305cec88bff8979d47bd87bd371c18d44c986df31b13e9418e6adee1dfbaa01f84f4f84725289b8b6d48510c9a81e793f0015725a81a439b2b1fcdf76ce7cab98b6aba711db629251f360cf82687c46fd1dc6dafbb63ef2c5c3541be"}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) 16:27:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000040800000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_io_uring_setup(0x7c36, &(0x7f0000000200)={0x0, 0x7590, 0x2, 0x0, 0x114}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x6364, 0x8682, 0x2, &(0x7f0000000180)={[0x7]}, 0x8) r0 = fsmount(0xffffffffffffffff, 0x0, 0x65) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x5b56, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 16:27:32 executing program 3: prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x9, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x188, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x800000, 0x40000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x7}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300)={0x0, 0x0, 0x10}, &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r8, 0x40000000000, 0x0, 0x9, 0x2, 0x1}, 0x4) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000001b6007a20200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000900000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000a80200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x522b, 0x9180, 0x2, &(0x7f0000000000)={[0x9]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="00fb9d02f78c08545da16e97fa37bce8d7cb01e3d121e948985b9ffa8bd48551a74bee1415e6f8da70a36c9a595aff9b6b9c88bb096e04897a33140dcfd927a98d4a1ad2cfa1d7a800f75c725d3ffdd2a0be41bc0e65d2cbbee847b7b38b1c27f21a40b6736857e3ed9f96aba68025e43bad247a0ffbd8c7dc05a6c944d207201d059cefac631f3ac3ce56a5a0744a1c6bf5b45a5d84b756301b8772d0"], 0x9d, 0x2) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f00002cf000/0x8000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35, 0x0, 0x0, {0x0, r10}}, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r11, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r11, &(0x7f0000000240)={0x101000, 0x4, 0x18}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffffffff) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000a90200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000c00000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x4, 0x4000, 0x23456}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/40, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x1006b73, 0xbff1, 0x0, 0x0, 0xfffffffffffffd57) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x50, r0, 0x8000000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x1b0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) syz_io_uring_submit(r9, r3, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r10, 0x100, {0x0, r4}, 0x3, 0x0, 0x1, {0x0, 0x0, r11}}, 0x80) syz_io_uring_submit(r1, r6, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd=r8, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) 16:27:33 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x800000, 0x91}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_setup(0x29fd, &(0x7f0000000380)={0x0, 0x808cc, 0x1, 0x1, 0xffffffff, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006cc000/0x12000)=nil, &(0x7f0000000000), &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x5d42, 0x3f45, 0x3, &(0x7f0000000440)={[0x1]}, 0x8) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) r5 = syz_io_uring_setup(0x29fb, &(0x7f0000000200)={0x0, 0x3d29, 0x0, 0x3, 0x20a, 0x0, r0}, &(0x7f00006d1000/0x2000)=nil, &(0x7f00006cc000/0x4000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r5, 0x2236, 0x62ec, 0x0, &(0x7f0000000180)={[0x7ff]}, 0x8) r6 = fork() sched_getattr(r6, &(0x7f0000000400)={0x38}, 0x38, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x6a9f, &(0x7f0000000200)={0x0, 0xbbd9, 0x10, 0x1, 0x2e8, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8000) 16:27:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000aa0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000d00000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x10000000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @empty}, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="25d87d07169814f9fb9b4895d346f39fd19aec4be1956a8c54937ed20025201a3b5c4c52735262402cc0069d4836624998960c0060d180e779d29b8748c9f6eb45a89242c54d584eaee212f2226b3149b82b", 0x52}], 0x1, &(0x7f00000003c0)}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x11, 0x2}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/167, 0xa7, 0x2000, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r13, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r8, r12, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x3, 0x1000, &(0x7f0000000780)=[{&(0x7f0000000380)="9d740097aef5e3324eb8ebe52e0724e5c92c14892fb3b8fcb998ba3a3212e5abf3e512af7958b5924721024a756acc2955e19aeb8d7e5244aa666c10d1ac2141d22d957e56817144fe2e0b714d47ab7ab2232f4584d4fcf76d455817", 0x5c}, {&(0x7f0000000400)="3680fd074dcb9b0f359bf44142da90068f9d9942d5ee8a8a3fbb6b4e0df9c69985213e70055ec8b6fa1c5a5eda877c3b2792bc0c70c3babc2d584244", 0x3c}, {&(0x7f0000000440)="344479eb276f6be6341b8f22bfa2a789049168d84a924e4dd30c22b84d43e6c8c9355bda6442a019e327290ea9c12e445c34a0b875a51288df211973d9dd43658ee5f99d4e8e546af5fd42787978ff7f9a27589f466d964dbc3c71df3caeee60b72246a51ab8", 0x66}, {&(0x7f00000004c0)="a949d58f9c0de1e482e211be45faa93d6a357e1faa86ed2f95ae717f7aec7845289fbad0f59bd44b7275c8c8e957cf476535b846a3758bf64cfd1271aa452d18a5ec57", 0x43}, {&(0x7f0000000540)="6b60bda7cd1b6c0c26cc1610df94d71947392169c068891b994fc78db3256040de0b9b8311438128a153f4e85bf03de429f9e611281018192661c8420f11f039c333d9420f9903c71be350629f418acb572b02c52a4a83b37e91f6915fb3a11c318d8914", 0x64}, {&(0x7f0000000680)="98356bfb33fd3f51033cf7bc734e26e7e952422da6970daf9c0638fa2a537a8e605e2f62bad55f6469f290c75681558686f80ecf9ab50be235a282194b217e7933664d45d68e03669e81e85839cbfbe1f46612120dcd0d5e60232086c0f8599ae5cfc4ab4cf03ae2a5e535af54d688944d0ed11e86e70c4f04d4b1fd6c9c1b42888c7c00966a67e8646c7efd57a8097a68149ee2d77ba011749adf0731db0ccf6f8be22e93979461df0dc8fe31a864ca62ef591bcefbc5c2df3e2c034e7e4a983cd396095f48ed58732689ff8195c1bdd9de339a16eba666a8b0534ec8ab149e976c6a0b2fae20e39c5a", 0xea}, {&(0x7f00000005c0)="d78eef843860e2", 0x7}, {&(0x7f0000000600)="8ed276d1dd26f56fcf57af76fe3bea77f5", 0x11}], 0x8, 0x18, 0x1}, 0x1) 16:27:33 executing program 3: prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000080)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x400000000000000, 0x0, 0x2000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000ab0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x7, 0x3, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="43d492630e812edc8a605980fc69af169e30a5a6bb857bc52c907f5d0c04049deda42dbccc7ed9b6341cbd7714ad1bdc93c7572d38b2a17a9de215020bb67caab7d27451a6a1d1f89d6e", 0x4a}, {&(0x7f0000000000)="87961b4b5d06a6d8b8a48f9353a78c7dcb07c58976150be6b37276650035a2375a", 0x21}, {&(0x7f0000000340)="03d9aab0ed3758b8819efcdab60d1242779806baf81ea36beaa39726b6aae5124a60dbe972e206d95d6bb74014cdc5d19c82500dccf1c9e8a4612657e2b78e31e9eb8d86c4d84cf4868146b56a93aff38f77df8b5f06fe965a9ac42c45aebcaa0b5fd2f11633356c4f33161aea5a0a99082cccf10bb94551b2ee8e61b21504def992c844ad88e91ec46c1cab98120a9f9dd97922e3557b3004f9efc852a4e93d6c6b3aa38db29b539275a0a54431bd3a5889ae01eda40bfb9c3940237997be7c798920b6dac8af7c22823a112d8eacacf5ea54f52a3b21dfc0c1ee4d2fba442b350b6a39014c7479df", 0xe9}, {&(0x7f0000000540)="29cc92bbc83276ee1fab1a7c6c71988267ca33f9b26544c9c48688ac9283f6c564e5bd2c7903738e01046ec470ef78c48f92bb6b74ff9673d43d4f7728988baeffe3b6b02d3a4219f1b8c5cc0de470d19fff6409f972fce29772fa77b6d6175f48ddfb2eccbd6ff5dac92e8cba31de1da8dcb4", 0x73}], 0x4, &(0x7f0000000480)}, 0x0, 0x4000020}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000001880)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff], 0x1}, 0x3) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r13, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r8, r12, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x100, 0x73f102, 0x23456}, 0x8e94) 16:27:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000ac0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000860d00000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:34 executing program 5: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0x4, 0x4, 0x1}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000240), 0x9, 0x604801) syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r10, &(0x7f0000000200)=0x80, &(0x7f0000000380)=@generic, 0x0, 0x80800}, 0x80) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000340)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001880)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd=r5, 0x3415, 0x0, 0x0, 0x10, 0x0, {0x3, r11}}, 0x3) io_uring_enter(r1, 0x4f96, 0x0, 0x0, 0x0, 0x0) 16:27:34 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x24, 0x100, 0xffffff00, 0x9, 0xffffffff, 0x1, 0x6, 0xe0e}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) dup3(r0, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8880) shutdown(0xffffffffffffffff, 0x1) 16:27:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x5, 0xb0, 0x4, 0x5, 0xbe0, 0x4, 0x9, 0x4, 0x643}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 16:27:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000ad0200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)='v', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 16:27:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000e00000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035934d876ba4a8e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042816f3f28a28e0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96bfadf137caa2b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1647], 0x586) 16:27:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffff