0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x28, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x34f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2552.405819][T31600] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2552.418725][T31607] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:56 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x29, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x354, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2552.465527][T31628] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2552.486123][T31644] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x36f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2552.539858][T31656] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2552.600919][T31697] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2552.618802][T31886] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r6 = openat(r5, &(0x7f00000001c0)='./file0\x00', 0x80, 0x40) io_uring_enter(r6, 0x321, 0xa2af, 0x2, &(0x7f0000000240)={[0xc5]}, 0x8) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) io_uring_enter(r5, 0xcd, 0x1b29, 0x1, &(0x7f0000000180)={[0x2]}, 0x8) shutdown(r3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000080)=""/238, 0xee) 14:30:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xe79000000000000) 14:30:57 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x371, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2553.045478][T32156] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2553.057984][T32162] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:57 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:57 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf00000000000000) 14:30:57 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2553.266069][T32176] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2553.283619][T32193] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:57 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2553.327123][T32195] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:57 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2b, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:57 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x39f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2553.367083][T32210] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2553.390749][T32220] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2553.446714][T32231] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2553.475693][T32244] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b2a6ed2b4323c50ff7be27ae86dd", 0x36, 0x0, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b2a6ed2b4323c50ff7be27ae86dd", 0x36, 0x0, &(0x7f0000000640)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@empty, @multicast1, 0x0}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:58 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1200000000000000) 14:30:58 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2553.896663][T32502] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2553.911406][T32509] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:58 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2c, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:58 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1279000000000000) [ 2554.140163][T32528] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:58 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2554.181918][T32540] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:58 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2d, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:58 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x161e010000000000) [ 2554.229857][T32546] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2554.261719][T32557] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2554.316001][T32563] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2554.334886][T32573] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1679000000000000) 14:30:59 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2e, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2554.751520][ T381] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:59 executing program 1: r0 = syz_io_uring_setup(0x4c2c, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, 0x3ff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) io_uring_enter(r0, 0x44ee, 0x12e7, 0x2, &(0x7f00000001c0), 0x8) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000200)={0x80040, 0x4, 0x18}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}, 0xe21b) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x14}, 0x100) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) faccessat(r6, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b2a6ed2b4323c50ff7be27ae86dd", 0x36, 0x0, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b2a6ed2b4323c50ff7be27ae86dd", 0x36, 0x0, &(0x7f0000000640)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) shutdown(r4, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) 14:30:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1800000000000000) 14:30:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2f, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2554.998132][ T411] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2555.034529][ T425] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2555.084204][ T430] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x300000f, 0x100010, r0, 0x8000000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002900)={r3, 0x5fb0, 0x428, 0xfffffffffffffffb}) connect$unix(r5, &(0x7f0000002940)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = inotify_init1(0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r8, 0x304}, {r7}], 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000002880)={0x0, @rand_addr, @multicast1}, &(0x7f00000028c0)=0xc) writev(r7, &(0x7f00000005c0)=[{&(0x7f00000001c0)="34be7e", 0x3}, {&(0x7f0000000240)="94385b8670c53b41ec695384d8722d6dee6a9bef309bf0acf3eb800401c52ce450853f46ce4277af148ce7ebeb23d47b6ca52c7d4626a13d5a75355f7f18667eba2c808e9d408a6c323ae101a18ca2b4e629dd0be678ec5af6b03343c2fbacba5a292e67f56e4efee6c747ddc9efd041c5e8bed47289392267467066de91d1d96798c94d120c8fbb4ebe5800bf8125373e33ec6267e37bcf22c4ae281232ae2dd25059a0d0e06748b86ce44f38223a5bf2de60fcfdf26b8bd50613a22320a2a374426a2a3f", 0xc5}, {&(0x7f0000000340)="b51613b17f103e61190f5147b9d3977c15b3030c397746853af6254ea8b8722b3833eae99ca217bd5d25da0b683641d70a86d5ffb32f25040a731df31a27e1be1f75273c46791cf3b50fa55ec4859d700ff995fe5b59c1f65657b2fc9515999b7f31c07769b4533b4cb6c79ca4ebde988889307141a4228bfb901bb76b4a5fcd22f3e46241a7d9b6e087c8d3c860b3567d5c7033c16c861a936015aef269cc95d1dfc57401cd8def553aa6fa6ba4c23f939fff999af4cbb00fbf1098ee04505b1e46e755c54be74b1abfb98e2cd2623f7a79904e17a7e6b84f15a068a8f3", 0xde}, {&(0x7f00000004c0)="d2041161449afc68d2274975c858915e139aac4a507ea00adf709e47fa582021ce1325825592c62bda384dee5fc49bf018dc8cd019e2e7a30c54372921ace9b0a6376d2eec93e073a7bf55f869741d8065a0831f9406f0d86f6e85501efb130c96fdeafbeb3f7d36cb50c3cbe2141b55e4436a9b7a88fae657ad86302dc03d78d3192d33593c7e0f1fe72bc3891b3d78dcc9d235cae06485d440b73b3de255a5cd2f92cc618b1ec647f225a31cb6b6d056b16279206d6eee3c0d399804a2a0bfd1e148a6eed975842e50454ae216c08152e3c6392db1de759481753de353d7cc7b8bebbc6f6f38563c3d56be8f41aad053a6666d2cc9a1779a", 0xf9}, {&(0x7f0000000680)="b73f947a5b7a31dbb95ccde12c2186e1954ef4e22d15c70d0efef52596391cb7c3c63e58a5f0649c1a914489c9b3e328801dc0679234f1b7542efa5ff4274b5a7d1a135949189c0df651211b906fbc1aa4f0cfae5ece4aa0dc196631cc4790355fb22d8a64b5d8a559f0f8cf396c6b77bca9d0191f38200a9d8eb3bfa1f68f22d3c1c9326895c27adadca209379f675ac7a9d6f07be053a479df7775346d8fe335b5537062c566744d883d8a5fe0a8ee7d14eddc7bcde2c1f1659692e43a0d4d85dbd62cf893f7dc9614227d949ad2", 0xcf}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="3cdf53738b7ee8b650c8b10e8a9606ca8a6b1bd1065cc01c13b8da424030ebe36402cc2daec8eb5bafe4fc27961dfc1ec55c9f8eab0ba9a57bd7acb08b0c6f7b48af2f9d3dd73545cac6de4ea77b9f550c3ba27315e7a22364b899f5ba1e838de61cfa825f0dde51b7524bbec0b1b0b9abbb967544b24d523358c671021d3741ea15ab8c29a83a3e84809f3112b1c1eb7e1aecded74c50c7e922acb8913c830ba32c9a746c57296b90d2ffdb579ca6599765c3719a2abb7cb71c219973efbfc95ae835f31fcc703d95a4da15dfe1cda0754b2350efcc0750e1b557e5747a08728cb47c40f3a50d8653", 0xe9}, {&(0x7f0000001880)="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", 0x1000}], 0x8) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:30:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:30:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2555.129031][ T449] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2555.195514][ T463] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:30:59 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:30:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1979000000000000) 14:31:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:00 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x31, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1a86000000000000) 14:31:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:00 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x32, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) io_uring_enter(r0, 0x19d0, 0x80b4, 0x0, &(0x7f0000000180)={[0xffffffffffffff60]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x2002, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}, 0x80000000) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000080)=""/238, 0xee) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0)=r9, 0x1) 14:31:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) 14:31:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1c79000000000000) 14:31:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) [ 2557.060766][ T801] cgroup: Unknown subsys name 'perf_event' [ 2557.066757][ T801] cgroup: Unknown subsys name 'net_cls' 14:31:02 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1e82000000000000) 14:31:02 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x33, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) 14:31:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x43, 0x111100, 0x23456}, 0x0) io_uring_enter(r0, 0x3a28, 0x8d2f, 0x3, 0x0, 0x40) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000240), 0x1) [ 2558.191833][ T1291] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2558.208905][ T1302] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:02 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) [ 2558.277960][ T1309] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2558.290862][ T1322] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:02 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:02 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x34, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2558.345085][ T1333] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2558.365349][ T1345] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) 14:31:02 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1f1e010000000000) [ 2558.407946][ T1351] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) 14:31:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x35, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x1f79000000000000) 14:31:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0xa9ae, 0x0, 0x0, 0xfffffffd}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:03 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x7ffff000) 14:31:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x36, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:03 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x37, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2000000000000000) 14:31:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x211e010000000000) 14:31:04 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:04 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x38, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2272000000000000) 14:31:04 executing program 0: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x40}}, 0x2) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x1}, 0xfff) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2279000000000000) 14:31:04 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x39, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:04 executing program 0 (fault-call:8 fault-nth:0): r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) [ 2560.130632][ T1985] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2560.188341][ T2002] FAULT_INJECTION: forcing a failure. [ 2560.188341][ T2002] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.200978][ T2002] CPU: 0 PID: 2002 Comm: syz-executor.0 Tainted: G W 5.12.0-syzkaller #0 [ 2560.210736][ T2002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.220781][ T2002] Call Trace: [ 2560.224116][ T2002] dump_stack+0x137/0x19d [ 2560.228451][ T2002] should_fail+0x23c/0x250 [ 2560.232870][ T2002] __should_failslab+0x81/0x90 [ 2560.237719][ T2002] should_failslab+0x5/0x20 [ 2560.242256][ T2002] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2560.248036][ T2002] ? create_io_worker+0x6c/0x3c0 [ 2560.252972][ T2002] ? snd_seq_info_dump_subscribers+0x2a0/0x2a0 [ 2560.259213][ T2002] create_io_worker+0x6c/0x3c0 [ 2560.263974][ T2002] ? __fget_light+0x21b/0x260 [ 2560.268719][ T2002] create_worker_cb+0x44/0x60 [ 2560.273393][ T2002] task_work_run+0xae/0x130 [ 2560.277897][ T2002] exit_to_user_mode_prepare+0xf8/0x190 [ 2560.283538][ T2002] syscall_exit_to_user_mode+0x20/0x40 [ 2560.289033][ T2002] do_syscall_64+0x56/0x90 [ 2560.293516][ T2002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2560.299393][ T2002] RIP: 0033:0x4665f9 [ 2560.303283][ T2002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2560.322918][ T2002] RSP: 002b:00007fa90b41f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2560.331316][ T2002] RAX: fffffffffffffe00 RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2560.339264][ T2002] RDX: 00000000000000ee RSI: 0000000020000080 RDI: 0000000000000006 [ 2560.347264][ T2002] RBP: 00007fa90b41f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2560.355223][ T2002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2560.363172][ T2002] R13: 00007fff744f368f R14: 00007fa90b41f300 R15: 0000000000022000 [ 2560.772526][ T2013] cgroup: Unknown subsys name 'perf_event' [ 2560.778511][ T2013] cgroup: Unknown subsys name 'net_cls' 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2282000000000000) 14:31:06 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3a, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:06 executing program 1: r0 = inotify_init1(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x304}, {r0}], 0x2, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x4000004, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x3a28, 0x0, 0x0, 0x0, 0x0) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) poll(&(0x7f00000001c0)=[{r5}, {r6}], 0x2, 0x9) shutdown(r5, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000080)=""/238, 0xee) 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:06 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3b, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2579000000000000) 14:31:06 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:06 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x1b) 14:31:07 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3d, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x261e010000000000) 14:31:07 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1701, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x2000016e) 14:31:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x28, r0, 0x311, 0x0, 0x0, {{0x32}, {@void, @void, @val={0x8}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x17b4, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_PMSR_ATTR_PEERS={0x17c, 0x5, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2c1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x670, 0x5, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x254, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xea}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x703}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc5f9f3b8cbb092b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xfa0, 0x5, 0x0, 0x1, [{0x1e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf0}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x14f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x331}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x55}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x91}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x378, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x389}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb5ef}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x268, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x24c8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x26}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x168}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0x8a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe09}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x54}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x348, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc926}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb6a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x388, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7a}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6428}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc2d9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5b07}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, 0x17b4}, 0x1, 0x0, 0x0, 0x44081}, 0xc074) r2 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:07 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2562.999254][ T3637] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 14:31:07 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3e, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:07 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:07 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:07 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x48, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2563.159209][ T3756] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2563.186881][ T3783] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:08 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2686000000000000) 14:31:08 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:08 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x4c, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:08 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2563.722668][ T4172] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2563.735361][ T4179] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2563.777746][ T4187] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x7ffff000) 14:31:08 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x281e010000000000) [ 2563.859585][ T4208] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 14:31:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x165e}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x4, 0x484800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = inotify_init1(0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r8, 0x304}, {r7}], 0x2, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="fe51189cceb9809200711d5e2cf01ceb4bee2b46661b4f406202e1475d0c8b0cb1c8dfd90bc5c58b4d22986393135b268833dc9ed2d6bc6845d0d0e3f1a695a27116ce48c188993e57c5909247d259c7a1a8bc88706437b4aa48c2f87872741180abf84ce8f8fccff92cce9aa82b62181ef871086f76a79c9a3a45c2373f83b2c812ccbdf2b5e6cd00fde1d5eec5ddd42dc55062b3ce54a848a872ae9aa824f2c5ce0caa683caf45f05b6b9b9e200f0e06451e32bb69177a87955a0158c75f2be3e1f5e7186ba01cab7f", 0xca}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x268}, 0x0, 0x80, 0x1}, 0x1) io_uring_enter(r8, 0x34cf, 0x899, 0x3, &(0x7f0000000400)={[0x80000001]}, 0x8) shutdown(r3, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x3000006, 0x810, r0, 0x8000000) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x0, 0x3938700}}, 0x22) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r10, &(0x7f0000000080)=""/238, 0xee) 14:31:08 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x68, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:08 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2563.958663][ T4222] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2563.978402][ T4240] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:08 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x6c, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:08 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2879000000000000) 14:31:08 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x74, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2a86000000000000) 14:31:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2b79000000000000) 14:31:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xffffffffffffffff) 14:31:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2e1e010000000000) 14:31:09 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x400}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2e79000000000000) [ 2565.401088][ T4777] cgroup: Unknown subsys name 'perf_event' [ 2565.407357][ T4777] cgroup: Unknown subsys name 'net_cls' 14:31:10 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) write(r4, &(0x7f00000001c0)="3a5b254c62a05eba31720e9d463ed2c05a", 0x11) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) syz_io_uring_setup(0x298f, &(0x7f00000002c0)={0x0, 0x108d, 0x2, 0x2, 0x371}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000680)="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", 0x6, 0x0, 0x0, {0x3}}, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) syz_io_uring_setup(0xe59, &(0x7f0000000180)={0x0, 0x0, 0x20}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x6000, @fd_index=0x8, 0x0, 0x0, 0x7fffffff, 0x10}, 0x9) 14:31:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x2f86000000000000) 14:31:10 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x204, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:10 executing program 1: r0 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000240)="7334d1477be662ce68e9d6ac2b64deb0b4e9ac0a06040938c2045697b851ee686de32d9a92b4d24ed19750cddac20db3eda9914d90e6e84f2dc0460b4cc7b1e60aeba5faf3005caf061ed9b2d7d1ab0fcc2fe84ede0114cf3f98028ce7df295507073f2d8922efe1df39855ce80bc92c3ed1039aa8326c87a2c1897e", 0x7c, 0x1f}], 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="002c2f6465762f8812362f736571002c002c2f6465762f736e642f736571002c002c583b6e61000400000000000000", @ANYRESDEC, @ANYBLOB=',obj_role=/dev/snd/seq\x00,measure,measure,mask=MAY_EXEC,defcontext=root,dont_measure,measure,\x00']) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="a3d120ad42dabc94a8f5f9f68321990f41199bd54299a572472065be2f2cc01312c50c55b02b47a60bee33e26a67509cf40d5ab6accec2886bb8689a68c96c833b167ab9f72e84a5ce3961d7b18725bc30aae2255555a852ec85c62557f91af971aab6884f196490ad6d5a16cbac44df387f7d6b7bf1baec4fedce4e13d78d032fef2e891e837dee098ab5ecba69dc15a68458cf28138a9a205403448d36a5dd3446685b82958abc6b1844d19bad96d6a9da376deaf468e05b0383bed71cc8b2a3ecba37474e973aeac10d731c13aa3e5a46cf7238a664faff6ce32edf0a29", 0xdf}, {&(0x7f0000000680)="f63928c22f9d50d50ae84f0c280a7b6196971ab19c96cac224266c392fcad354883a8bf6b60c1576ef336fe4cca23688c3100be184301458ccff7c36dfcf555753a18b053167d8c88574efe0a5054f463de7ed244498536710af87d605b9c6c2b2d80df99d98a2c832e4d2ccc02f22aa64c31745a7f5607dc0010349ddd3428e787b8ae06164b8f38455112ffb75f4c69017c55e0486c18a02eb74e9ce5dee6b3d22c027a24a636bd93baa535917e94b0c3b65e0a55c62402a2b3b634116905f755485d5587bde9cc73815d5", 0xcc}, {&(0x7f00000003c0)="02ae51322ec1ef9a1ccc2e7ea6b49bdfe19d3bc382adb9cfc37067eb72ae7d84f1bd5288142959489eafb60469a49027a9748fb944f32cabe676ced3d9fe2958", 0x40}, {&(0x7f0000000400)="12da9a00495fa13ad09eeb2a1e4ba12e9aa7987b", 0x14}], 0x4) r1 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x3a28, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000600), 0x2, 0x40400) fsetxattr$security_ima(r5, &(0x7f0000000780), &(0x7f00000007c0)=@v1={0x2, "8a716de3c488343198aab01be81a2c"}, 0x10, 0x1) shutdown(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) [ 2566.557853][ T5235] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2566.574780][ T5246] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:11 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x301e010000000000) [ 2566.641339][ T5255] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2566.655211][ T5273] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:11 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x300, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:11 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2566.693775][ T5280] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2566.724622][ T5317] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3179000000000000) 14:31:11 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2566.782432][ T5348] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2566.820980][ T5376] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x341e010000000000) [ 2566.838177][ T5429] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x1000002) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r5, 0x0, &(0x7f0000000180)="4e845a8ce04a56376f5a076d4c1c561b4270a8d44c0dd27d1f0dbc97", 0x1c, 0x4001}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:11 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:11 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x402, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3479000000000000) 14:31:11 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3586000000000000) 14:31:12 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0xba55, 0x0, 0x0, 0x115}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = syz_io_uring_setup(0x6e18, &(0x7f0000000180)={0x0, 0x2ed1, 0x20, 0x0, 0x2c}, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r7 = syz_io_uring_setup(0x75cf, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2000004, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r10, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x101}}, 0x7) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) r12 = io_uring_setup(0x213c, &(0x7f0000000380)={0x0, 0xadaa, 0x2, 0x0, 0x347, 0x0, r5}) syz_io_uring_setup(0x1b3b, &(0x7f00000004c0)={0x0, 0x16, 0x8, 0x3, 0x7, 0x0, r12}, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000540)) syz_io_uring_submit(r6, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, &(0x7f00000002c0), 0x0, 0x0, 0x800, 0x1, {0x0, r11}}, 0x180000) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r13, &(0x7f0000000080)=""/238, 0xee) 14:31:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x361e010000000000) 14:31:12 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x406, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:12 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3779000000000000) 14:31:12 executing program 0: r0 = syz_io_uring_setup(0x29fe, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) splice(r3, &(0x7f00000001c0)=0x2, r4, &(0x7f0000000240)=0x6, 0x1, 0xe) shutdown(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:12 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x391e010000000000) 14:31:12 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x500, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:12 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2f03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:12 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:13 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x10c, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) shutdown(r3, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) r6 = inotify_init1(0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) ioctl$sock_ifreq(r7, 0x0, &(0x7f0000000540)={'wg1\x00', @ifru_map}) sendmmsg$sock(r5, &(0x7f0000002f80)=[{{&(0x7f0000000240)=@phonet={0x23, 0x8, 0x10, 0x20}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="feee75ff7cf03eb8a84dafdf94015ee5aa5965ddddb1cff7f2e075968c9f4487bf1cbd6832d09f66710c8c4805cf525bcb74d4888ad6e4305d903906622ad6aebffddc65b64a6e8443a5efe5d4200f8eabec11a1de9105d9912e3f3ae31cd22351ce5b8f1857f9e6ac7099cdeb6cf9164812326d9c781b7cfdf8d7dccd279057254f9ae00f", 0x85}], 0x1, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x48}}, {{&(0x7f00000004c0)=@hci={0x1f, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)="80e8063bb7c8482d120410f78f745731af9d265a7994b38583d1559692ec4587ad3a3b4f5814c60d0c7b17654557d98684558ac9712cdc67acd8bbab7945b92da3a2d9b07f758aa4d228ae8c1f1caf5f4a4743e57e74995df3ef622e741caa9f517f8d4e4bebbf61e50ce624c153c344c9dc2a953bb37075b7f5a899ddefb5c4b832a2bfd9ea29c9456d196fe3912f370077a0699eb0678e5ab48e675c3a3713898c4609714a772edced07a770c95c52b61118ec45e2f6959c981c1fa41d9307696383acbd385b467daf23406c92886c495fb7e94b9dc8691294bea4c1e510066cd372b92a0819cc49d0d56c5658d5974bffa974646b4daf1d82f6df429f6ee034797b719690e7b8b9d92058b41ac8f2a53c686de8b06ec993ae5c071293b4828bccd6ba1aa66e1a170779a23be22afc1eb2832ab65bfb17fd54dbefbb0c913193c41c8bf8f1f149076b4ff7d9ba449034b02d910adb85003aedcbf3784c48e75e2de4a5a7efd9c26b03020ea2f209836df44c71c232056415f1de4c672ef61269da0ca29ddc9b03980bce0f4468f3d814ca6db2d70283fc5740acc92783172e2675761c59dc6810dc0a932269ba1fe26dee6923ba4142690f52849446b5511c6f74794abde54968a128e022eef6795e7b3deb0e83a268b9d7b7b5866b4240486a25c56e33ba210b0f017992c4d174bbf37d75514b30e2abfa890ab888297c2765a68fc1cc5e52f920b74fe24c3cb6b6f266e718eab10de4b191b5ee7f4572ed41401c78571afb2c1948c30b662b5ba07aa658657f097fc3aea44968e5b9326a7cea57fa26c54a991ce3c94d21d9c91cc3cc69a463aebddd8b213145bd2667c4783bece45a530997044ae55a68d07df78585885d395a755d94c19a95fae87ab7bea844a586894012e02d5624a341b47a67f3a47ece794447db54b74754fd96977aee7bec2762a6562505cccbe6d6e262756a5bf590f33a5cff3e38083e13597062fa3cb50f7aa32776f57645e709f91af9990ab5fe2d5b005e4ac2bd11a4bb31911efcc4f8ad6bae27f02798189b7a41bf0a8e631e9b487cbf9d69d5ccfce4fd483a87e69cc35ebf9902307b81e47c33387e93d4a4c3f3ee913cd7f400df4320197613a55045f78b94d5d2228108b1bb4df929681520840dc1d8ec84f07632c774ed60836e98d6c8938310a0c1bb507d69255fbc657374681c13c30ced8fbafd963f3e00344b6777b7ac79e56086180d00e1a8d494c91d9c456052f7ed1d5209c35c3fa303a8748c650d63d57724e4986941d2fa0181a03e66bb1c12313472483e837f9c6fc0c34bb32b4b9001988dca48a77f85c8ac62e143f0f945172ebd41905a0f02e56ab5a660024cdafb4897c664af6cffe714deb8195542de74dd1b63f5053ba7919931f40c2c590626057cd0fcfed0d4c67caac2efd3b94e1c2fc9a1b73626e84087ac248653c0d390ecde51ecb15e4128de2d6e111d967630d301eba7b2c850baed2b9516725ec6ea793ebf5d05849747b9ffce43495b3d64c2511ce112675d22372b930f3a6ab15565322645e93eabb35143d0519e3c98c93ee3b624f9e72c1bb86d95206cf50f48a446ac647e5728b1422f18086c9af92bd2735a4e1c5900ee8ff537e5086cb92349bdcdb01cc1beac836b2330af76498fa98f6083c13bf9c04c1bbd212f093eecfa513614a828e34b2c9d4e6de47009b7695d0605348cdad9d144672c284b6215952543c619b7495c5ac84a68fa9747c27500566fa854f2892826bee5707ae51f285883569a830a21d5e10d48c373ae03bc9cf7be77ebf8376dd2cfc8bb9ea025ff913f0b122bb7db7be3ac63bf5bffe6ea5c414c29676dbbcb06a36488637d802aedfa84b267c67e15ee8ae0d930706aa6aad0dd5ac97d45b26826be6ae273d8df0310266f7685f96ab4eb31781037ad3a637a60ccd0da6f1210dcd28219bd7d45721b34b8cd8bef0fa6fed1f860f5ef8bc460237823a86ea9cec4eeda8f1b02dd8dc15378856e21739db60fd18d5c2f561132bb10a03057824bffa7414f3804e027f886e37ea16d35b438d0e53bf6cea6f8e87553a95c2eb3a454fbe7cad08fcf765de7ae0821a3f66e8ac87f20397f689fe99f05bcbbf1d1e72e57cbd00e6ca70e6a9741a355742a668c7a0182ab1a92709707d637f2cae4219439945475479187e49f3efdb3a5994e16bfc200b6cee24022991b151022912143aeb09956487eb1c1f0b9284e819a8320f9a666d75a9b8de3ffc059f860b009fab639df5675e776a7ceae2f90f9ef7557f978b9fea3a280ba464d58b60da68f3a3ff14ba0248c8b4f2cbe0ef8b99c8022fa69f849907e3119cefc0887791ba5bd7130be4b6f2e4b2265a70f6a626e77110d4917f3dd53f96ed3bad6a7a64c06acf17982e2c2627c561bfabc53819b539d9de3da1976e7964cf16e109959dacad5a4c6f4849a15535c66cd7b5a9f5eccacc195e0f5a2032ac57a41aff7b1982d5392343844823c354f0660c3693e5df417ddce155fb8fb08922cd33b64a190e788bc84406fa56bc885402fb9821f68338e78a99d0bdea4978d182c18d684e9017b3f0b24164bf325063b5165716beadb893e45f85ccc48d4206a44acb277a7596991738c8600b31fe47d82cb7ace41be51be2ae7e31311df351ebaa666fdccbe3d129818defd34e28ccd72043431f153f3f99af1328b80cdd878932bcac4c040e4aa5de678737e78b5cb35c3879d68a68596a1a029f11afe297c2f25541dca94367bf0bdf0d3e1641fde4940cf125a38372501b1301c25dcdd23ecd42b6591772620b6a1575fe803ca04bff900a900d99cce04bbe4105f7576d48976ea036d22ba8750b1e3d230c47d3dffb0d06a4e4f3c241f91679b936ef05fa6901bec8a5d9b592d061a40dff48e76aa74a89956c9b76df87b0e159d533ed8e98ce835c3bd2e75437a2ddb55017f3c214dbbccf373c9fa5f44a37eeaddc50bf70c5742521933550f546403dbb36c620d9a21dcdd34d46b131fa618714a27bab475955eefd5f7e5139f2e749af67e731c6d4b004ce37e00134fe7c13d577ba8e28326c5523501a493f139b13c42be92a1e2ad6448e13a8b1134401401627876252e2437a6625cbe76f7151067c1cdd7acbf1f4392218eaf35ef6092539cab6c36004e76a195772971a2d6bca875099c32e58ec8e6b4718f190032d69002d1c70d47731c4ebd4acc8c4f2b125b81db1ee4f4d9587b7e30039e448e37cb9f983813a6561d71fb41b6a70253c917ea8aea1bf911b63f28fb7f33467d02d62ce5fd8644ce83632c6d7d627c152368faba0c54432c46016f7fc356381d30051a7cc0eb19fe54fa4606fd32a4c6e0b43ae325cf614ab5376af6016a6f0c5f0b6edf3f9d713cb1c365f158ab82c412e1f78a56743794fe917d4ea0831e7ed30c280eaa8cf2f23501c8228924299bdbe74492cc0d54ee11a1dc73479cf0be82855cac033e535955bdb172ad179735f334e5dffb41a0fc65f5f72186a6590a27ef9ce0877e12bdeb02d03427c813ec9574e0691d716a313fc9958e121aa42d568a81ee9dc7fca94f08ca5ecf759274b14f46ce078b95e4dbc2d354eb6cb641451085fe0a433911a3edb2fa21c08f17709beb7de279e2b8b055a9204368d81f79a6f50e77bf475fa32e6648b2208aa66605a030a5f787edce5dfffa7239468d7599dfcf43833f479969bcf6d074390b4df583577b70bc844da4366b268f9a3f5a4ea59989b6ea4dd412d2c3240884afec539ae48ab4460b927a7bd2ead3ba98626620cf73e35d6d58bbc0f3911ab0fad3d48b6430f747bfe6a8cac282cdc7a886b8ac4f8ad86496402ad431829b00f39935f2bfba9d5f30378a921c85cdbeb0a63e5ba09470d7feeb3beddd3426d5cea51d6e10fcf5ca130ace80d04876afd42aecf0884ca098308474ca39220454556a9848138f7f7560f23043567004b6a67513c7bcf435afcc8b3e1e92cbe382c7a906de5daaca627da4c57b612f1021216b0c4658b4e2c7595a45cdd292e53e95c8eeb091405c4e0f45579ff661b252613669d7683eed6aa33b8ca8cc87c26459e8f674fdb3375c98c31899bf95150371d6ec8dbc6b22c7d9f549e5ec1328e3635744d98fb583c8a18dfc0d52f66b8686851839976bce82ca6fbfe8f93567e9de015d202c24b70fa36fc83b8349ca37e100ed514c4f49f69cb92caec8f42694a75cc09cd11feb231acdaa21d69bf2a760ff0714315d2bda11f39c7beac80892d0919dc8b215cc05d59069898d6053a4a8dacd2c189cefe8ff14d2f009f572118abb6f7ebd96a08ea9d161e812d512c2d6dbc7454c52e3d9ca1ea3a2f16d0739aadb5af3c3fe943214c2835fa53924eea9b646e665dbbd874e7f75f9a22a43fdb6964c7563c91f140622f0d4dfec3613951f49dc4d593c069e1810b66f6cf32604b07c37dff3d3d146650fe093383d03aa6a6ef57f40ec49ff857613ba80242d740cc26a6f354ddb772f9e6a2854eb485c0a4c52504ffce26bcff345bf728111ec8c2649df8ef2bc51276fb95b327bf45e77e02c63af64ffa90d2bbf0bf883d585d68345ccbd0bce4440f098d4588e66eef6015925880a38f72ca06e45df20a194b49aec9ee5a3376d8c6e6f65bd82a1f436b16d3c9672395d91515d1ba8114d777d66315c10e4aecea7df9473d7bc1a974367bf0996fb37cfd4a6926baed6065c0bcd86ffe9b2131155b0c028be2cb7e0e936fb8733d5931e4faf6094cb0ef393c72556e35ba6d0921cff464118da1727a286d5c204614f997bed29f7e3408c7d2d685d6ccdce9cf8cf5b662673239a9c1778392b14a3a05d8484a2ab77bb04acb048cb9f49a369edc400d842cba1469880531a1e52fca736bdfc71fc0e9380104bbadd93ad9e0c28c36eeaa672c5e34755648f87ccf996f8ddcf3b401d97d5dc55ecdde09b0bfcc3c2a7eb5420fcf4ac72633fb0ef84e5c48d26ddabfd3bf2bd33d0910ea950abc6f43af265b065a627aced32576d686ea62c7567a4cca760a25256de92f4a515a926ccd4a6e6e0f24d65ceb281a6078068fa56a789996b647657df39def4b915057af67c2e5d5636056320ffe32bc3c307aed09a883150fc497db1e9105439ab2487d93dc1e770b6cd61f33ef3d243a5e5640d093bb32a64d39621446c62920b20fa63ffff09a617674473b4b050a799bb9b714cd42eadce75f60a3b38bf47b763e0e42adbd06565bbf297ada75dd1f1e963bea30286c858dde5f6b7e33d6603c92691dc5e332128a05a270737cfb33d24387ade569a98c993c48d43825b9e40fb07be63747e21413f4a4a6b1ecce40b8239d5626c794d70016edcd375fecbfb1463f74e32974598fd0a8621e10b8bbc7ab939fa65e6c252324df5cdc14a29b99515e6d09a20c005d8827eba8ef7f34f23d4e5d8cd2abb66c8d1ab9b6f8d754cc159922b0018005a5a77b105c1e92db142a6e83c5c4efeeaea9f50bfe487623050751d36580ad24533fbebee7f828e973c75e4f5e6d235e7343392504fd781114dc4f980e1f8cdc1a83a552ada679a61e0c78dceadd50f022235cb729e6264b8ee6b5c9a0a00e68db7acf2926f0d536507134079f6e9c3f82ce0497a084d2e630de9a900bcdc9df0fa63bab8bb458dff7eb64f88c09fbf9e5608b894d5056bab0c7f9fa0517a3434e10cfeb95825fbfbc580a969db2f82cef28716eab5c136d2d08311182d0dc0e6f15588fb2572a501b911d4f45dc51756e3b8e819ce7f17b37fe9a4e06c2bc909a896dd7d9a", 0x1000}, {&(0x7f00000000c0)="96655127ed32f69d5ac4605e559af3b711cac03af8ca1f67d82c115c8af37339d9", 0x21}, {&(0x7f00000001c0)="283b0bbd8e2b08c0af1194f3a67c984dedc2f52596d8d2a72c4cf5095dc5ddc203ff6a759789d97de2259837bd09498bdbc6c5824d02e614f75658e90ca4", 0x3e}, {&(0x7f0000000400)="4d5c44188874341f937d9fdbd644bc2b040c15664234ae9d6226", 0x1a}, {&(0x7f0000000540)}, {&(0x7f0000001680)="5afd2f0a699502e6a9b977ede050026166a0915a201e3c4c4bf313c81bf2e4b4e64170871ca7261b4d50aefae2b64f9266b627e3c9bd68e47c9f26477dcc73cffe48a92beb4836799fdd5fdba9ab843a40943dc08935bd4786b21f358f26139ef5669dcce70c6c398b756f274aee32277eedb8b00bc01fe882bd3becf9c7fb7a05f55dce36da5fd938fadc2954c9c5a50f7435e8a52f7e2b39a575f0e62c2cb4463b21d6b4ff865a55ef879cd13668d56ed408c7144ce9cb3acd0faddf76fe34af1528738ca593f256058b1f", 0xcc}, {&(0x7f0000000580)="e3c40543f716436774d674bb0ca2e117b6972c8d54f89d55a26ca319429fcf6c9b1aa7b7bbca8d351d4d45bf45c412a00b2aeef6b5b6011936009376e184f65fee9e9f302af65715857440f5ecd2d637d5964ed4c5ed716d14cd5d41d7c19cd4dc81a7e9abdd47818eb5af317588b06424a268d85dae3b", 0x77}], 0x7, &(0x7f0000001800)=[@timestamping={{0x14, 0x1, 0x25, 0xa749}}, @timestamping={{0x14, 0x1, 0x25, 0x3b}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xa8}}, {{&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001940)="43c1689f9525542ec9bb8b9a1975ae3ad66accf03285d534bf5dd3bea4f527dd66bcfe8fe43f610b76f802ff593a742d2c765eb024f80056a89971c6932dedc4b7c0b02e1b69e3ee4df851c0e22afeb8bdbf500a3f4dd2789cf1706a83aada62600757759901688e8686ccdddae1d5fe05b96554284915a67c0079ddf8a8a6d836e2c48a3c47b240eb3bde120063005085cf875d2e662b09f03cbe47f95f591437b904733a3a1eacfeff365db1fe9a199bd6ab0168c46cb769e54444b62139c6c0711f1167150b548b07b944dc6831b7ce1b915dd9bdf1b49b4d9988e43171e59668ec216461fd43f1c5c31f84080e8f93e23c475189fe89b2dcfbc243c831ac6d7da9adbb15027486d6dbc66515880e010c7ed18311c47b764788ff6a18bd5866c2b20269d1633410690857f8e58a659ef0f1bcd76bf28141061f169d4fa012f91482cbe9b06e6f7ef387a4ee111ba575c281cf179d261edb46c04c3ae71f5c87f499b0e37848aea1f1ba3610921e0f4b0537d6a0d3a7de7f6db2f891211df7d4b9b8ebaf7e399d434e37e1b2667cafa04b2eae567714c1eecab2dd46af7829c412741a4f846cb72834d1362bbe649c0c4dfd6be811afd9b8a1e04d14482a286d947401a3d56785fa09b5b0dfd0c9f0828aff552fb45aca9a4f1a5a4f0756276d851dab93d95167951f43f87783d1a1108cc001a6d9a2f230c39cfaf51a56e3548053aa5b1ee740617478cf9fc5701b584ac42b3c71c433e90e873fea087e606baf48d99ccc46520e1a5f5f731fa4bdae84406a4636d648a62d8caac6f61e4b83a8f42fc74d55b3891f950206d935011380b44a7daf3b6395f5c73675d52f5e66de6216f46ccbf0da66e1d9c2e922f5c653e4cc36b9ad080c75af5f2b387085cc49941c1502df1ed7816c0c32064e496d3369dde4b0d5e236b415ca0ea02b337050794a17396662ba408b9407456835e8151db46822fc08a8999f55e10520c4a463c2976d519f355f847eba2fea472fe2d2e99c4bb97be48673e6ae5885a9ffd346153c9ce1f5450678611abd4f57dbf7f4e34b11bfe241a454673d57d097085b1400fb3cc485a1f266214df88f33f2b90082bc6fc7d65126a5b82ef0d98b318d785c2c4047c64f3ba35264a71bbf4d7cfd0d21978d80e29fa7a24490e5053a259ba5a5cc437ac70e6a4d11b2d485b22ec0ef45b9c6d6088f85e2d9cb3785a27ebd2e705f8023c23a70bb2d4bfee3306be4afe628b9e7423762664bf27f4188b778554e9d99edbd7114cda744b69d0e75be066b8708842024f697095bd218485ef0fe538d532053d6be5803dc2945a0f6f11f90e73e5842a87a8dc57c26a1ef2a82c5012db0d19ef963cfafe7ff146bc9db3a636a142f1ea2127c0fdb4ce11ce99bbd991b8556be33be549914d434494a02f46bb4b1a3e310b855a8ca35781cee6c0f32d07e760b76758b92fbbc6da3555980e90ceb9e3d42d2b3359623b8a0862e012691d74dd15adb5697ffb9c90dbc8ccd8be09b12609f56fea16bfe432dd299a8a0fbe8f51602e3a019c7628715c7e69c4b7e6e36aa8baa65422b09b7da33816b4b64a006387c0754829e3b52deec43e86ae224b40dd0c1b0a635ca5e4fe0b3be4bb26f0bf65c97c1da6b963df00cf8e39c8473e294eafebf939e630221b76aeecdb8ddbb0d3fb9f89de290d42cc9123b7c02c9b6b5489df4ced80c88ab7e590714fcb32e32a98a544fae9f1c67420e4efcbadab9dd13a9c2fbe85884e1b55ef74f654a3207a00f1eaf152a964f505378a249f0678c73488863394008a499c34c0ca41b135d239b4d5ded326b61310b207755cd871ea415cb6c971c80120718f0ed3aac21fec2c08de320de539a736fca4ddf0dbcd3454089ae1ca8b99c54d1c9696dd5e119d90071bbf1c3d93a21b5e5ba5fde2a996b6920f7ea5f6be32ac8e1d810040f2810adf85ed25ffb71dab53dda123bf12cde3536455b2a6ddf56486f28b2a874efb1232557c2f517db4dedd556d83351ab9dfedb52c070d1638bb19dafdfff3bf0fe38107168241530e2a7b0a7938fe64a922293c4d5683253e9f8839afc268bf02604ca40ccbc3cf3902d3f30cde4f565950fd546cff027d4e0985cec96a7972bf1e05007b28666fa9fbbc97f57e96a57fd371879822d73f43f4fa605f569433d4acb4c658d7fe0ff95b954334afc5dbcd7b061ca838e2195e4f60c4e28266b818174c5b36cac884aed417b5b026acbc4103ed0692f01fa3d363108e5d235ccef919ada9e8351f1039e483d7d1a11b8f2d12fa93bf16adfc8a731e8b538d6e9a00ff6fb1cb35803c03caab1eec3af4252fbc4e38e828a00829fdcdccfb25f0c4b0834cc35ff2538296c24d450c4c5091446afc591550622e975f58ed13fcd4a548f3d18a3b54786994928fd1c1e16a9c79b647a3c7b20fe49b14df2144899c76351e7a431ff27471e97d16365bfb0345bb2d6aa000a2b0c1da74f79f2a0d9da52fc57e941dc0ce133ccc334e15f783b8229b173ee6ab4a71e658d89825c12f7aa11f6d5fb0a565a3c077acba9ceab1f8cdb3f992471162a5f589dcd51e7792f06462c000f699ff563a332f3c628e2037f2a4470ad0bf18d3ea8e591e1a535716bd32feee594c6504a91aed352d639c23f381afd13de8bf58bc7eb54e2992e6edc8e1f8c966d5ccc10d3c8a93d82c0f48eb5da639338346a0bd92d97ec9be5ad041288a7036cd62573f16a29bbdc6e33518c92e2e9deb8c28cfa368e4225a6dee315b76bb6542f41449e5ab0eeaf6966b5bdaf350202202ab0612b010d202e3eba7493c24c9b7692d9ffef2805503ac6a598872cff5c6c079e6706fa150e34a0e57ed82e6cf52106590b7da55125f1857850d8aaa9b1ae6f6ce5697314e09b693aba3a22dc1280e489c615351c11435d8acca4baaa643ca943348a15c7cf599c4590a67f66e1ae0abb8d97ce9b35dddfc5151c72cf009174d6fc001e896dc00df5607b4b223372eb2dfa7264e9ca108c6fa3eca9701307ba909938b4c8bc19770d0a84808b92bf8b8b441c1f9fdff6ea468defea10248ff2b006df16d264ee4176037b8dcf3fc07f574c5489995767a9be43e2f2d70467145ba4fa50fbf1a85ec5eb6631663acfbc60d538b3a853de98b012bef35c2133f7e875870fe9c4980a76acb9cbe95a06e1675a131ac5bc63803a7e582245d69cf831b6dbbfda655d86ced964bd2c25949674c23b57bfdb1848e69543698372180b7b4f994ee51f704515b6687b5ff13747b995e285912a8a63049f34769efc11c996d7b8297db6d9a6ae7171d5bad2ab5b401597f0d57704b54f1b3ba68a91edccb20a06896e75102fdc1dff5d4fdbe1c4409930e27e02a94237a6d369b6d6da9050ba83f5c0fcc2bb9d6678e7b3c66e43c20a65e28273dba6524ca4a9f2a2bd1fe329116d06180efc31728dff53b01af395e2faa53eb4676d6bbb732898c0cdff273cde352fcec8d27ced31c8869e55b2a50a784c2735b3e896e0e97a10f2305b834c2a1a4cd7c1ba26cf9f5460b9ee43cab01fc492a9b927c0500f4d041dc411ba95f100b6aa6a6893c3265b8f1bfc10ea9cdf969b4898af1260bc4e9be4e72191aa507d7c65b9fb5d9e00fabeb3b35caad6ff87fd4e862603c4eb6b7e7f1ce8a8e496f0a6c06944d798628111148eebc886ffbe7ab77c7f3e369e713227d949c24710adff0917e9332749a89cac9846d72fb058af60fb8880b4c7a90ffd4b4ea9aa0c45c3196be4fd71c9b07c37bb645665f09f0604594d874121224bef70b1784d202cb2dc102037f9cc0a8aa0ac79ad7af7ada3e4f8d4114de55cffe424f0ef96018313fec15dcde606965b0aacfaf99aa1c7003f5a38756897a1dc8e58e54cdebe400841acc1f21b60750dcf7dbc9f9f6bc9f943c1074716b9af79efab9e4aaac6f12980ea302a3bdddf8dc59d1c5e0f1e8b571d5328ab76b5fd60f62f58b5e5eddb8844a65e9b799122896ba148f6c95ef9d05afd690d1b915d1cf1ab9cd231e6e94c9659fcd2bd90d4c584618342bcff5bad0a40a4c330bba758ad0dc0a1a445d923d73e4a58a2f3cb96c7bd4d0bfe9ecf881752fe7f7791cd1ab4b71396707e95771fa5103ee82f279a464404e38c309e6f4d7c708332e767ac8e01513b0f8f6d56e0aa07bef917dcf4f74bb1c70f3df5a4b6915f3b729f569b786c5e84b3046622b313d4f111ab3438e0a9648a20787f85bd41f903a150bd6d369bfdb57c8f62c3c3faf79eee504a684ad11bf0b1c041b4e3e7ff0d97c55317cbef60e6b10d71e2083ff27ad4150d5f93e24181445004a690ee56eb9e63759f5ac4c5593c454d5920efcf16dc3e3c9cb6a9d5622d3215103c2c3d3f84f3a114b9c6259421e3abd092152439ad70f1170a35764cf1f6789305bd194ce20a95f28a951b1834bcb5051772d467e98b4ac354bef85d813be121bc8650ab15f18faf7de94ef75c7c1b344112af9c80724f80ce1162ea95f87ce4fe45a9d52a53ada7b62fede9797cd75ed9925408e5b3f87c3b7acad73acd0a25d25fe83e5d6a4903ce400ef8d7bc3dffbca0c586841a3c0233bf448e350cb3c61d3c9488b9baba31832e530f97653b99f1a13f6acd51cdf4289bf262a51c96661d108239bf109c3ad9fc496810dd721ec4041ef8d9a150f3c3449cdbdd5eb056dadc51405f3115f28384d2d882c8630367eebb3cf234be804c55bd5ffa04458db4586538ad7e1bcaf59bf5b3206d3a56bdfd1f59a0fa0171927665c5ffeadcee919a5c3bf25ce9e1c3a8802012e31ff97e35e85429c1975a8fa7f32a36bf14d258401d4a1de7ec41f3ac73dd4b5cc325c81a21ca3d387afa51c5e01856554d7632ab20cb2dde8e412b6ae393d07f44133efa186665ff1931083a71aae8d52ae19f7d5584c48d0ba68afb1b6e1d13f0e1631db88b31280111c11c4c0c97a6455451ba1f3d185135f0ba4755b40cca84d26c2e7b7cb8e05501768812e03f35d589166124715135fe5cf57ad601f21372771024cf7b509b0593858ac359a6068228b0233f9098303dc86022c850df4481646aaecd62eb946af69be80ef250024d204460f25d8dafa1f51b490a39ef5cc70987acf65389f7e7659c108ba67462211e3dbd0bb71ef312cc61f25c16d271cde42d84153051ffbb7cc4042ac4701789b0e7d42186b79f61f21e54002f6f841834c22857fa895a83a2eac80fa00f606d0052065aa6bedf4d34c1765a01fb0125df8b57e4cd3b1ff59876a2b7d58a49124ad05747fa71faf1a3c72452a5669dda415373e43e100e50606582589da9fe35ad68b4c9ce7cc1d87ffa1014a889b3db87670057a0af67d204011c32ebad89af82181503a5d066870b3064718c5d1694ae1b6a6a0a254ab139d6bf5211cffd3845d6f8632de69a9fd3d493839a16e3053fc976a9c4aad4327188a5b0fd5c920a9fa1fe37861da5c6ee24eff7a5578c9b3ec283cbbfaf5aa3c9900dacaf5686c2e4190ae5b6642532c061e6789c84e680e5225bb5e4596fe7d610fdcd3a7583c7a7c07fc4746266f23e0197dcac8cd41af19ea31113ba7620ad47dcb4fb33b511cd8c28610479a424783ddf7c300d4ab62bfd725ffaa1bf51dfaa273b59ecd8efb77ae792d6292401b941f6c2c9b8aa429180b8ab71bc0855814aba4f89647b70338171bd0225fc50430dd85fa3f96c24fec88a7f0606f6bb2944da286afdd6290d3287cc847e3ea8fe6ee5b0026af19ced7d307c69a4ea989046a10e596187f7332b70ef2e9731f13b34f12d6f", 0x1000}, {&(0x7f0000002940)="9c628f839555e8ab61ef20a01b415b3856f9e8b3c216e0c5ecb9dd59bdc8e16576cd1c7af06772a63c7637cf36db2c15b1a0e6f51cf4adb69943670f9fc2c8fdd309e886365169b8b74a253f1fa2060f300862ec4e15973848f8d94dac7ef6e731568ee1af09cc5c8d270f892dafdaf55f5190019ec35b6c3bf65116a458fbbe9979827ceafc600ac188c985f0922f69f3e808297eeeb38bb2d1073e0ecab9bc1c3c8f18e3d6e5a1c5bd6bbb33e0415b2a65a13e63101dfa74d64beabf0e7daf325cd86c475ca89f3a0c1c786e04676d760422303de6542a7da09fdb246b", 0xde}, {&(0x7f0000002a40)="65175507a474d61fa026ba3a4b7d3b6d45c42bed63968d5fb4994675f73bc84ba710ae003de89156bd8d8ed66d5b6d47512b5d00562e67a57103c829ce1ce29f5751886329e8e4c709ebc9074678637d8cd0c14b57ef7ed6a1e7c32c4d6fdb311c0af11b67a6e68c589678df9cfb0dd4cb6d156cd0f13d8c4acdc05602a745d8a6b22697224709c0eda8d7aa3f8895882f8e15ff55cfba817d1eb4e1ba4a19b7e31d50b0f96725fc49a2016c2a1be0d8a35f38e0", 0xb4}, {&(0x7f0000003040)="6ca701660ad713148b4f9eed83edd5899caf9f41b39192617d9c00047a4ac824c4e4b1f1109c5b1f9745eb307bac4f9740352f0459327fe9c3d89cbd7ec4f3e20f9c9313a255c8f37eb2b5634b10a0cfe4a4b88b74f0895a21ccb6edbbbb1be6f5f6a7fe9c1d2af10e39a66d15aa3253759e03f9e030d9e505501ec5cd8a6304fde7bf57dc157c5e3b2aceb2c95f08dd124d180953cbe7f4890907e73fee1c5f34bbba12a9aee2c2179de49530a4bfa51ac2a7078ac52fce3190bf85b96c6e98c8f9445592313b0d4373d5644eae9e44157284ab7932e5aa344d06711ad24fb16ca887a5b0c3ed22f37a6ed5d8b5a95135c57a9058d94bacf462a0e0adb8e51757e6d438941864e6fc434c714cd7e4cd660fa2e1adc75e9de4b027a2e10ff4137caf0208198164e5681ca39e2a7dab8e8995f943831995aa57c5e6f17a82306585e9352b2f36755524c60144244a2d324626a370abcfd3ff580d4a8d2273476b9fff397c33be97", 0x167}, {&(0x7f0000002b00)="184808fb32f9ce77b5f9da31cb41508a461e741f4a3b5abedde5eb8121dd1a884c86b9ba926ae9641dd1fc3733d5a4dbf8c7fc5ada319bf7ee7f2ca52d181663ef72e58d0ebc25f035e7f6b917d81a0322abf0676f4abd6512d4fd8d2c9f2e1d318843915935d1d03264f61258ac7f9a6dc600f72a152623d507a1d2e753acb9ee34f8e266e1ae08396635f07fc478af4124b344a307a10c3989", 0x9a}, {&(0x7f0000002bc0)="1b7e85059e9f7a9870634f026b547c522cacebe901b23afe3fc15a743c77e834c29e4765a08ba4ff63a5aa7f7d72fb0c30b84c55900ed0fcba9ed939445db00069645941c33528eeeac029958a4ac8e66b91e7200810e7431dee3bec021a251e8176fd4cc0aa79c4b80c7db00d47a6564bb2e6c8c723fe5b848acf157855466dc293662e9f1933b8c4bed6a8da45f642a9a6a078deb522ad7a7313e20b8588e905dce2eac380b97716c0b4dbc464ce6beb84d197d0b440b8745d64544605f12ded2404c231299f9acc2329ac6f7d9cc838bba78c35f0b0085e57010d18b8218ff8", 0xe1}, {&(0x7f0000002cc0)="d8e9b7ab8f2c7c2b7a7b78f2887967f439b1344faba5daf69dfcc350345dbf2438607c904b17500c7672deae9fa90d5c72f90cc2e99bc14f599abb21c4307515b71e95d955904abd9e255baf3dae674eac19ef228b3367f6d66cf0d2ad187b79a2ffe90119c490f4a0ea443d58ffdc38debf43fcb957d696667c87543139523e22b056c0ead014d20f4a23e60b2a4da78b493f02f346227d05dc0128d36a67c783123cb53ea1da7f0fe07a43b66594d359bafa0b5b23f7b7b8096662eaaa0d", 0xbf}, {&(0x7f0000002d80)="c9adfd196196d0e10f2599a41e957b55e2371317c42f258d8870c8859c1a9fcce63a86eb135d2e77d1337e786b22375073dbf58a010f98f09e79e2c0072d45f0831bf1c275d30a4febf633d44322bc33c4e847871afb571fa89008ec68d9d9c7c0f1759cdbc2ed57149c6a38806a14a0d0c74eb02a2509039e7dddbdda96a004524293b9ce25466bf268a15f9e3c16ae49aa007866515f710dae5bf79c9b478f7fd0d1946dcd2cc6ecb54a5c59a02ce7a3f0a325fd1940f9cc60bbde047bd75857b360095a42eae2cfb4011c2253f05dae968144455149f77fe6845390ee332f48a3a79ec69fef01e832e020bff7d5530e", 0xf1}], 0x8, &(0x7f0000002f00)=[@timestamping={{0x14, 0x1, 0x25, 0xbfb}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @mark={{0x14, 0x1, 0x24, 0xfff}}], 0x48}}], 0x3, 0x10) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 14:31:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3987000000000000) 14:31:13 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:13 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x600, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:13 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) dup2(r0, r3) 14:31:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3a79000000000000) 14:31:14 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:14 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x604, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:14 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x4000}, &(0x7f000064c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = semget$private(0x0, 0x20000000102, 0x0) semop(r6, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) semop(r6, &(0x7f0000000140)=[{0x0, 0x7f, 0x1000}, {0x3, 0xffff}], 0x2) semop(r6, &(0x7f00000000c0)=[{0x0, 0x7fff, 0x3000}], 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001a80)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f00000019c0)=0x80, &(0x7f0000001a00)=@l2tp={0x2, 0x0, @broadcast}, 0x0, 0x80000, 0x0, {0x0, r7}}, 0x80) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x10010, r0, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/99, 0x63}, {&(0x7f0000001ac0)=""/208, 0xd0}, {&(0x7f0000001680)=""/216, 0xd8}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f00000005c0)=""/85, 0x55}], 0xa) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 14:31:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000940)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="00b28329f56c2ce6e176ed6a662e651d483b05ae056c3eced9851dfd411f7150b16c123079c1b79724059d0b0dc275b6568657050a0e84bac3182112f21cdf375eeecda971", 0x45}, {&(0x7f00000002c0)="0fdc2a1b689112d524fe43ce1aff33c7388f6e05de0ce197335109f7f83dc38cef8a8aca7aa77787f0c7db18e913e115226b6a759da75e677c24dd336d9159a681b72ae3dffe29ca47704eb192c2335c59f83094adca487c2c7c89ad38504d876373eb0c26f6c641137d79c45a6ffa7b0e2be837576bf4fc1a56eb19188c5a64c3494ff5b239192cbbd2122ca16db935ac1dc7a4f7c9adff3c5e3b10a1884356c61affda8c2428cbb41dfb841320fb8ea214c88ca121f7ae869dd9615d2bcddda84cae96c2b9beb02af59ec41f8bf9d6a42f31bef77eedef30a5b8667396a9687d9cc62b44a230201a46c1d4c2097e36aab217", 0xf3}, {&(0x7f00000004c0)="c10293d690260bd6af935dc8a996e659c6362a547d731c268bf6e9e49fec6dda1e3ff382e54f386507b8907e95ad24258b3dbe29ba8a63917c7834e9b89451bbe39d7f1891056082eb6a6c605bbc1d0c311511f0b837409b9abafe543b8f36314e0022cc17233eae11b8b7e6d97beae43aa3849ac8a5035493bd3037bff8dea415d3fdaa0873457dc90352456a30ed9d8f7acb2bef70de966649870dd2e3bad8288b7e1ffec1164e076fcf7425f06382cc4288df", 0xb4}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="908449ab6168ff08d2bbabfff9be128c8d434887aad7140b79e9bfe8e6a6dc65f404c155b7a42efd3c1d357766e86472dfb2a769ace738c33eac550d1ffb13ed564da656d3364bcdab1b27bb89cb7ab28d74bd6ebf46acb2219920f3bf3298285ef69613c66e5158f5b56f1e55fb13c00a902ba38bea5d68dae81ef3c9bc88729efdd91fb19d9e95468408c2290b335fa48165dfb07d04d8c179fdb690836ba51c3dca51d253962fe17b18c90610b5fd2972c2779a772d245aa79e336ee48152b6517a51788d3714dd7e3f88f9f5e4b4", 0xd0}], 0x5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)="f5525f40146c004e53f584f4aa1e2dde23747191ff4dca79", 0x18}, {&(0x7f0000000880)="6216fc58e19ff89b", 0x8}, {&(0x7f00000008c0)="3c4128e230e5c53b13f00e3f95026247417bf3b6f54e849386b890e2d606b7e1960dea1efe93e690af50ab72cdc5a8fc0f5eebdaacb04392d8d45175", 0x3c}], 0x3, 0x0, 0xfffffffffffffea8, 0x4040}], 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x304}, {}], 0x2, 0x0) r6 = perf_event_open(&(0x7f0000004400)={0x2, 0x80, 0x9, 0x81, 0x40, 0x3, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x60000, 0x4}, 0xc414, 0xfffffffffffffff9, 0xe400, 0x1, 0x1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3614}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) r7 = inotify_init1(0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r8, 0x304}, {r7}], 0x2, 0x0) r9 = inotify_init1(0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r10, 0x304}, {r9}], 0x2, 0x0) r11 = fsopen(&(0x7f0000004480)='bfs\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004540)=[{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000a40)="7a65fd60347b81f9bb2d0c9fe78f68f6a6ed433845ef28a3ef5f8c4ed36ab50c71867225acf20cb9f4fbfa689f48b506eac094c2e1e743e041fb8ab61370a9e4318cff7a0098", 0x46}, {&(0x7f0000000ac0)="2db6c0c1c1cf1b8abcb556dccb7e1433eaeb1dfdf5d89bbedc826871d1cf209a62c3139938decbba610fe2cf21ef28849051635f0e8f2d846cffeb080f2cc76713ef11379d08d5669b057277a4938707af9efc8618c0f4f89c60a32d5c6fb366b43db70c9f1d6df439b7b0e51930880c6f991b39a16f8aac3f1d836b61d04efc5e1b1204eda0edb1d0d8758e79c723ab955f321a6eab7a84b051dfaf4d56766c47e5b1921b9748", 0xa7}, {&(0x7f0000000b80)="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", 0xfd}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="a877cc8eb74bcd9a83b0e90e7bd9211f7399feef1004a814963db702d40169e49f3ed14a5a5ba10550f3f9ae9cb7ef7bbe30731a2c2b4860be4d39ec452856df028dd368b7fbb66acdacb23bf3810f8c6cdb8ff2ee1a727329935e7d3f1d54bd7d277a0a5e4c0108677afde1dff5303bef74c1874491d475b7f6893b40ee646efa4a86189d9e99c82141c1b342fdbc297c5075a6b0c690dd1d30443d81f11e6c90", 0xa1}, {&(0x7f0000001d40)="262b162d2533ab33a906466f2bc671f24bd5715a671914d55f8e1768e6c41ad89a62933050ef6968dc1a6d526f5ec232807c4333ff5a", 0x36}, {&(0x7f0000001d80)="1c3ff5c1586721bdb06527ad9796d817185ba192ae064daf697afcd017138729452ef485bc0a3416fac1c7e064c13dec094fad13ab2e8fe4ba558c76788ee9025ea7d52b3eeedbfd004796b857dcdcfaee347b7e68daa66b79ecfd427aa042783f7b154e1bc5158322cdccffc7f3b59f44742012c007", 0x76}, {&(0x7f0000001e00)="4d0c5ddb0ad7470528ce6cf71df2efa2f8bea3acf3f74ae2768bcaf8557b872816add1d52bccdf3e84080388ddd65877c85c553d769a5143e8dad9adbce25d6c6cd9c7da147d70aca51babc07a6bc3757aa38bb580bf9d18bf798cb5f901a099169c5e44f25cbe2a1e5a17728be31bbd4ebf4482ff033075644f068fa5648e67bc8a1d355e61bec55634cf7b643248342bed54767789060c56e1fbfb650f98797d6b10f637412d45598b7672a53c614c1efde42896ee98e7b70ebf9235b2546a67821979c24fc51489cc6b4f4a55e55205f739dbfaabc18eb2b18f72d9c04fb49d47696d4a063eea09b81b9ee22ee31f52", 0xf1}, {&(0x7f0000001f00)="98ef635961fa3befa84f5471684367144323347fe61d97de4fbe24228cd1bc47ea85b169259b686be7", 0x29}], 0x9, 0x0, 0x0, 0x2004044}, {&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="48853c4e21a2b19642a1f11f55b8b769b11965ecbae0a93df7d4d7280abca64c3ea8fa01ebc68fac89ff762749ca4cfeb04dbbf941d132ad66957864172c29570bb8ee0a17d8a508b46d0bcbfd8c3ef75718c41b631f129250aa336d7444fa126f16a326876a7f7b6ac95394c7e5d574c98abb1584f5190480ba877750a55abbd74ba24a4aa38c26de4a536e35d4e118b696950c334a78b95ca91ebf208f55a1f9a4719a9e66379b05270eea5c8cce17834b74ca7f5359db751f715417f605452f97ebdf6d2522a13f095e4ebc49801a468f32d7a749f91a1853f2742f921adb45f74b99606a7318615604b1540172082d207ff2634f9c74496a6e60c666e3c66779f68a7eda7b1e4c2a5ddc8c61d72ae3f9264a42c1d4d56d94ca357cd5f728bfd6f65867405f77c46dd98c0071c9a9469e74580ae212c459bd1698fd290da1d9280982751ca6e23bf3c88811aa738ebc6527aa6ae9c6563faf3c9274fe587720db788389dd3b538f366fa89b9cc30128e934051679d0da8161e7796685e46f38c3f306f455fcac6e790418ca09a415582d4c24ebc2f439beaa5c5ccaefa25e451139c328ed90e720b23e72798c5a815fea8f4974c274bb77f0a21b34fe010b48c9c40156e7bd04cdd0c72889b60b2085c788e16eae27d2fecad9351fbf27750e28d9d8ff1be5886ab3822420983ea5e8077c0ce5d8776c24ce86e8fc550c4ede6fd3811d3f10e9661954d63b44f961ae1ba55781073ced34bbbbca92e2e1743d3f8e094ede2b571346c1e9bcb729e9b563b29d69270c5a685908b23f95db29cd07cd690156f3c6e001598bdac03ab42a268ab837b45130ad314da1eff1e1bc13f8b4484c1b8008f730cf924b2c68099186c73263321b3227675f796542e902aa22ea20cba6265ad9f8883143b28395bcf3bc34d727036242e7de1c44f460b0ce463763fd91cba8a6ca7559e909e6fa77092d9ce23b7fe192541fb2b7749eca98031116b3f43edf85ca856a010a72cb9603df48f670ec3ebf554818cde371e36c2811d285fad5051d52390f0a00d7dd0ca4340d2377d542328972a3b47539374a59a21b721c737d9332b9e374ca6c9099523a53d5771b8608d86e6ccc408a29f89afb137da4a87bf69309771313fc27036f17355348f843aa05baf17cd7926ee000fc1207dc3f6eb06c0b5cb4b19e09494dfa30b99dcb3c314f621ff2be87a22d20b10992b2d39e5a0b0ed903c71bc4b53942f60a21f1ed9dc2664c67425428df87de2e73c3a9e0a001f35feb2eec2fa01e7af402dd6b7f17f090865a51535dbdc67532517e093e550a6ff0c7b8821c15f5f1a14dc3e70b58e25dea58418007d6f08cb77a1d8e0f1701fdbb4f7a75c6b3cc09279084cebf406d43ebefe679aa8e890ad39ef21d5ab8c46d132172f9c910b84cfc95793493b07aae04fead5f1cee45675cfab45ff6f571fceb2f0ff79922daa217dde7d8eb6e364dede175d6b5595e53903b937be857cf00f722d86110f1817c69c1a577a646d0c928363a880b4fdc47165139d163f62d2ada89ba7d7a765d0de2ea7f48643c375407b2c1007c781dcf1870c986315585259d63eb2035bdd3783310cea0085915d5a0bbe43b5804434391d4357804335fac2303912b098b922447567f1e1239a8b333f5c657b9376e887b4bf5a44b81707c6b4795057e84477fade7a3afb770a3ac5fe1a8749615ca3e3dbdcdccde3b2875a816c14a118d9e23f0e99650b577767b62fd387c20e99eecd4cdb6dea8b8c99e879e727b369e4bbee2faa1555f4296e1b2078123c710471c498d6122da5e25d4970de5a8d6261ce24a977a95f14a1423b35fced98f9c33f0550b1cc75db6f4a04ff853406cb939a7490027d13b3d9fe7ceda94bbcd380254016496aa95f87fdfd3280d1794af84ea6a8d267c04ec68d0de50c3f1c7d419787ffe5efcdb96f51ac8d21e5199ceb271a48f8b4f8e09c4f2f2dded1519d0b8e6f5d8b84a979b628de9b3b80c3ec81b7997d9cd78230aed5028fa96000c0a87a42b2396edce7e450568e593cfa107329f41181632d59be48f6e29cf37339e36511160ba4209c27e7caf27fc6d29d058c0485faebb69a1a274ddeb6ae92a996ccc96b49376f1b76ad66691e9681d3e6393efb23836f6994850f9d8f1d039fd147d106004e0ab6ab286a86a8a9e38bd01e9690d746c7abdbb0f2cd98eed7ec7b3d35d68268aacf348cf732ed5958c5ca55a81dadadc08cafae08f3572fecef6c30d453c1d828900abb30941d35dcb8684ffea7a982a5a0fa784de81882a06da17e1e51fed1c7175e95400ed475c14a276305667d74a6b11e4e3fb3da8d4abf82142ac380b73a65e0abb15ca3ffe069a4c22a89a4f5f9067648bc3243cc45c1b0f32cad0ab306f5035c8dae27711766a176a8faa6bfa2a06d24cb729e50f48bed64a0f0a9e47875bc082f35a4a04f406176961e000c29b1f981f38946255716d13e9957ed8b3eec84dc6786e167474bcbeb32315d2a5af996a9ecb2de9a3a08cc6dedee55784b86615b3988ede6f54807cc265b410bb504e17126750df20b303fb3fa737d953a8a2326325ee23a07a1ceaa4bdf3b9db01236faacdababf57e2b497a2838b88294d169817e02b0a99d19b5a508e7917dc520e15dbb8a649b6e13a2ce8d4b9d728980e33f92c3295e5023bd61785fb4de6785999cb3cec7d7f94893cc3c722e35005fb233db4f7e158de49f6b43d40947b14646d996a9860c3609ef4d863e45e557104738b4d13bd173e0067ac0f04caf1dd82113189dd43fe590e29768eea747901f219b1fd67b7fddfa307bda9a5a2d514b4db360e16f63d5aded0c411a2a985efead82d3f1a0a11d8de6abc363f7fbbedc1975c00e6e237ffc61e9d7b903a124f59fd3835ffd8aaad32b07f7f4172c1f9cf683dd67c6120e8ad28e221ff6197ecfcbc63964bd09f00bc4449f56f242f54a170f4f90d74e39e6e980585169aa926cfad53bb614c834e1be392d616eae1bdc22635a6fd2e9a6b197c6060cc73ce778a689c845289d596ffd0cdb01b7182f448f101820b0a82504f71aca9eea60d2af550ccb896454349fa314a6164e3600fa3f41684e4e4d0c50f2e4a7605793475df94f1a6a075293bb08dac81e69a0f4fe9425b93cfb42ab8bc1eb9aad0dbd24062c210160fae8e25cc139fe4038125975031dd9c8aa2677ff3dddb3e50e008b5c07637e9fdf76fe21cf95a79179bbffc38a70a60fb5fdbd2dbfb17b6e93664bf3a4f3583820e58d9666f19442b32da8f74156fd686e4549801d3b12953c9f88e01feadd276bba1925f4336e23e2923916ee045b9cb92f7604f55ac2770ae10a42108f7e65044c0bf79a0c962bf71944fd0ac6022559b554fbc09c1f84e52715318fbaf239df276a2273fc7a16c7188afe8a0edaa766dca055afa444b4555fbb62a8b5fe3cc12bc410a8b40d837aeb84415922b8767fe37f7e19cb4c5f99e308697cbd4419f7ec66c2f6facb38de1cb328bab4d97f057565368995256591f220d83d26e8e39b4c6668ec3a4a4e8c7443bea3e0f0c938f3317528fdab2d7539710ba8de6d57dd370b166a81b1bd2cc047d2359d0c04ac1580ee6e55d4ec76d1cb46fb3e41e2e029ddc3a880a1c81eb13e6c07bd912c780575702ecfdf3c8a444dc992602d78e84b4079fcf8d66cc38eebd6947fcc4d8b40670632354e99bb4190e699c1f5fb3dd7bc5dafb8bdba72c8be23b8d19eec8983486de171c699cc1b0ee3d18d2500af04888003b79136b105c30cb46c21b84beeb13cb0961c713045e756c5c47398b157e864994efb37f74baad272f745d58afb12ae910106762d0d577f1795d9cc3fb3c53db7462cbb0eb5bf2acdd72d17039d9dfe89fc069374c6945ab283fa021c5fe563436597dd7dc137b0e95547998bc1515d82b6d935af5f2399ca6e69541d6c92d489cf14fa647534b14d112dbba4ea88fdfb12e20850741d4021500713573fd089c836743e8c6bd0606cb57b3d248cb49fae422daf8642b86b8e091e8b155a6236a92c0f184ee3ba50e66b29d79f604b7d56afdde56d4feaf239131eabc48962379cd9c7c855bb041a573fd1abf9fb047c0e2b275120bebc6317100abed2161aaf5e76b47ac77413503acef69345f985a6bc154dcdd639e6e3f691948d736414a6701fb9ff03695cd65a20602cc7275cddbf5cc50519028dbb62f05d4a2296f2acba272cfd90710b62451aba338294af85d9d6cb12e224e64fe5c0100d3e6ec011fa0413ceabffc41f688c2a60dfbdb49408871aed3d3823e065e79108c550d1f911903a542033a07dbc82e5e9389cebac9fd62eaddd6cdfb16e912b24a70bad7ef8c74ac025049cd8f5facf0d89bd755a1eee9b0530ad430e86559816898af4a1daf990b923ca005b4b7ed2567e46cf8a34555a8452c0ef632f53c3060fab77b5fe086c0aa5b42120904618cbc14477d08c70c63d99200200599921b1d5d7beacfdb0f445025f2bc420a83d82c44786487e3eb23ebf143da5b16746dedf8573819e9282115cc2107b62c3df1fcedb6b47dbbfb875409450f597501c9e0484850b967c1638cdd726468d00dde6ce6a03d41d80c1f8199f55dcef6b1a6a370a14b23d6a0d7c18a6309bbc06785bfbf0aa71a81775431393558ae3db25dcb8c7224ee303be1138e70b96d7abbd1c03d7fe62fb1807676278b3b813954f249cfddaa2f3cc923c639d97ac889ca82ec24509367bfe5abf86ba5e4f5beffdec6c6e20b8bfb6cb18c6685e2c63ceee24d7dae77758b42e3f184763cbcab5d3f0c3111a595a4850befa87713c745c0f68f197a972c7e011bd7ec3f4427097596f0a92cd3f0601af53a969816eb5d4d6463d89766def2a5f7a88bacab9cd3f3352dd267e30758e57012279652411da3ee53e2a03ca307c77ef6046b5498e816ea3a930120720a3870d3045afa73468fb159908019337becd37f68a3a3d5697beaffde919624bd1fb886d2cef8faae6ff6064bcb0d1c88b38e4b6ff89272d5093ecc00f961b90611679ad6f69afab4308ec0314a4e1aaa908d713c6a36d8735f6dfb2f683b98a271597d96edbf8d2cec9d1b84c82b379bedf756049ec7c6d98a9e79c8257043a8ecc06bf4bd9c7db8650dcaa20032840daa40851ea48c414f5d6b374a9d4f90792094f73b9c5204eb09e0b8caebdba3088f52e2bd938e0ce9f80b7739e16a13a12a137c11b9bea3d40a4e32c80ecec2da207df00ec7708c34eeb60d1322b516780e4834489161638a095b299adb1b285cf13aac212dc9478d5e14e90b6e002d29d871da381664590a64c30e820009f78e7e1212e32450841561ad1ec58b5fe432b03d096214e5be6931a82f7843298a0fd10ba9dabd2a0f6f1c4dee5d73e4e634a9c94a6c77aecea0c7061c72b5672db49d7570dfd650100c7e10d7188203a5ec1e1d6af3a0c306d641bc54ab5cba13a4c202f362e4aca64ec3900dccdfec01e873bf81c91e4a982e6f4a4d847f3ff1cafd1e09914d5bca3016208a3cd6ee72cffebdcf05c801f6fd212da8b730ccf120efa6cc82771d9b59ed43b096651b087c3c558cbc286c17c77ce42fc7dd492a095d227f1206bf7d93b2d10524c39aca2f9bbce485f19dbd6b173c23bb9a9830696c0fdcba854e1cc0b9059c3b3060bfad58d0d31334e51f1873dd2e63928a8e3e45a06e198c4d7dce91656c2b66007a0273a8a8bafa1fadd179c575a63c6a529a3a68c8b61da1c9a19e6f7a976b4a727f8ff323302cfe47b35d60309e9a1", 0x1000}, {&(0x7f0000004080)="39fddb5b11096d59b01992d93377156257089dbda5996afcdd7b15731c57f92cf9d760ea7763c72c1419ae6417167335d48d5b25bef5b1634d9dbd8c9ec64b576cf1f8a5b911f916d2b4b46e63836133287f5002c48000aced661d48ae199034d6ffa393c9075566b2c4d00e2c96f727a6d4daa32044a77e6f8d878b1acb6f663826a2b83ff35a265f6ac554810e206d9b9172cae8477d2917d7315675798647020cb890232ed1ac65e86c10b3b11610e533b790c8a3916a171d07816e3794f004b8e76a141df0713eb071fcdb63bb841b1c217d82011781cd42d7", 0xdb}, {&(0x7f0000004180)="aaa7073b7703b76449c8786d8986b52d250d26ea16a27812bc30cb7fa45a283a773aa2c144109748b95c8367b9eaeb740c52f9dc7e42a1a1b0ba89983a9279ab5ff783853be2c6e7f084cdcad4cb715f83fcfc8ff8af465df7e1ae0c9de0fdb81483ef72392ec6b4e675423274fbdb0110e8ec13b97292a31e6a7899df0be13ecd388b367db503c448e2b95fef3d", 0x8e}, {&(0x7f0000004240)="710b8639b0c3376c702cfc7a9bb066e21757dc03246e8430e07f4c5a864c3953aa5f54b78761c2d94ecb37b1b8539ebef24d35a548878c48e032bba4a03da2787224f36939b09301e487f05b78dfc5bf117cae5b28697e4166a620845931f5fa5949cf7b6d2b9195beb43b2d458f7bf88dab0c3d8c745b3c45921f8f105c458865754f9a91df8e16bc8bb326330abcc3e50bf1936a84441e4d898f33ab6623100447d4f5936188cff62e69a1e292cf586758da7543197d8bc6114c4e9b9a19d399810f35dcdda3fe8cdc282e9a719a02298988f1d3cbe077ddd958", 0xdb}], 0x5, &(0x7f0000004600)=ANY=[@ANYBLOB="30000000000000000100000001a519af", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="1800f7ffffff040001000000010000004f3b702e7343ba709d60faf38ad181612a5c1ba64718ad91e430612845ab28b140339071cb1ae23e45a7a8902f32d4c3ca049160db192f1b5258c7b61dd7ba194ee56e29cc6ea1f93547d0bedaaf8f1dd40ffb7f0de85b18ea6f3d62455e8d0ce1e63ced9f25c0f3d6191aa9632d60bd3b75ba5d717457e1d7ee748d54ba176f770388ed5f05aeece2b80fe7d3ca8bac0f3038942f2d0aa07ae928a62c0f839efa4702b25775ae86ecd7572782ac3a000077962366196f0aa5413b33fe96b4bb7086238fa9612f66713f8dd02b6898dc40c0ef1b7504837e32022414c5fc", @ANYRES32=r11, @ANYRES32=r4], 0x48, 0xc894}], 0x2, 0x0) 14:31:14 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:14 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3b86000000000000) 14:31:14 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3d03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3c1e010000000000) 14:31:14 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x700, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3c79000000000000) 14:31:14 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) shutdown(r3, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:14 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x900, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3e79000000000000) 14:31:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) dup2(r6, r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000080)=""/238, 0xee) 14:31:15 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xa00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3f00000000000000) 14:31:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x3f1e010000000000) [ 2571.313540][T11442] cgroup: Unknown subsys name 'perf_event' [ 2571.319636][T11442] cgroup: Unknown subsys name 'net_cls' 14:31:16 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4079000000000000) 14:31:16 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xb00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:16 executing program 1: mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x600000c, 0x1010, 0xffffffffffffffff, 0xb72c000) r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x10000000, 0x1, 0x80}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd=r6, 0x2, &(0x7f0000000240)="ee0fca0124ff2e8eba9b700365d7c242d914377ed138fd734048de7511025604f4660feb9d4e8f4005ffe5cba9ba83d96f130a26ebb7e3a5b107f987974332af7c52ba43192011e97ea7339cc59e20030da800e6be1f24e9011ad0a16a6c3353eb8769557702e1be1302fa620dc55f169e922da2f17025", 0x77, 0xf, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:16 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:16 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x421e010000000000) 14:31:16 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2572.512581][T11918] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2572.524922][T11950] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4279000000000000) 14:31:17 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xc00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:17 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:17 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x441e010000000000) 14:31:17 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xd00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4479000000000000) 14:31:17 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) read(r5, &(0x7f0000000240)=""/243, 0xf3) 14:31:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4679000000000000) 14:31:17 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xe00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4686000000000000) 14:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4879000000000000) 14:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4987000000000000) [ 2574.061397][T12740] cgroup: Unknown subsys name 'perf_event' [ 2574.067387][T12740] cgroup: Unknown subsys name 'net_cls' 14:31:19 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:19 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xf00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4a79000000000000) 14:31:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = syz_io_uring_setup(0x75cf, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x3, 0x4, {0x0, r0}, 0x7, 0x1, 0x1, {0x0, r7, r3}}, 0xc26) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:19 executing program 0: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x4, 0x1, 0x0, 0x24d}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:19 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4f03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4a86000000000000) 14:31:19 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4b1e010000000000) 14:31:19 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1100, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:19 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:19 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4c79000000000000) 14:31:19 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4d86000000000000) 14:31:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b144b097eaa769be6d05c41bd34e677d114b654b", 0x1d}], 0x4, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x5) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r5, 0x2d) ptrace$cont(0x18, r5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) exit_group(0x0) shutdown(r3, 0x0) 14:31:20 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:20 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1200, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:20 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) io_uring_enter(r5, 0x7c73, 0xde2b, 0x1, &(0x7f00000001c0)={[0x3]}, 0x8) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x6ecf, 0x7, 0x8, 0x6, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000180)) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4e79000000000000) 14:31:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x110, r4, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:20 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2576.258425][T13820] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x4f1e010000000000) 14:31:20 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1300, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5079000000000000) 14:31:20 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1400, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5279000000000000) 14:31:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5286000000000000) 14:31:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:21 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1500, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:21 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5479000000000000) 14:31:21 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) [ 2577.738656][T14845] cgroup: Unknown subsys name 'perf_event' [ 2577.744799][T14845] cgroup: Unknown subsys name 'net_cls' 14:31:23 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1600, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5587000000000000) 14:31:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x200) io_uring_enter(r0, 0x403808, 0xfffffffd, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:23 executing program 1: r0 = syz_io_uring_setup(0xc3d, &(0x7f0000000440)={0x0, 0xacc9, 0x11, 0x0, 0x74}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000900)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4, 0x84a9}], 0x2, 0x0) io_uring_enter(r5, 0x6d43, 0xd232, 0x2, &(0x7f00000001c0)={[0x1]}, 0x8) shutdown(r3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180), 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = inotify_init1(0x80800) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000980)=""/250, 0xfa) r8 = open$dir(&(0x7f0000000240)='./file0\x00', 0x80000, 0x100) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000a80)="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", 0x146}, {&(0x7f0000000380)="d5928792c9387a80f377b19881c520467dd186103f2e0658a9e48cb9b7ddadf93d9fdf360004cb998ed076f1b0927e92efd0bc5c3c69cb9a32b637e8dffbb86ba67163729612859a267fed381f560558b1e24559463c658a0ab7c902ebe58af92c692e47932467f34b5c48e6880c272829f74b7b", 0x74}, {&(0x7f0000000400)="bec9e3c64fdfea0de2382ca262575edb29ed9db23d2db9ecb87497f1c84905", 0x1f}, {&(0x7f00000004c0)="5f0d07d80d857d6b53f0ee7342b9f11f965f4777159533c0d6da5d583d0f1869d8472eefaea5", 0x26}, {&(0x7f0000000500)="8614e78449683e0c4d64b3af114f5f5d6d1437eb8e70833a9dbda30853357fefd665782c312cd47b8d619b1556188a15122d30390bda64c49c93b5c86dca21eff4772a0bd2412c1f84f2a43cf5e4f4487b3810f6dd41030dd70eeb5e3cbf62a75d73f8752f500a433b235392be5e04886606e753e45e5d5986429eff148a8523d988cfbb78a14a", 0x87}, {&(0x7f0000000680)="c03087a5d93eb91acb7235fd37bdd0662bfd2e725c5fb2d9ade6439fddd3bcc89b299c7997a83398017559f7192b33f9682081508824356a2517352f59f85f02683d7d43016380e37f2f823e6a763573045f4907303645265d782d7c456f30786082c9952963b5b2fbacfc7e95ed96084da1cca9e7254298a57b5af9452ec5ca8564", 0x82}, {&(0x7f0000000740)="2e3ca42dab32cd317b16626ee9e3390e0e78de2b331f935e4121d4a1ddd02feffb2814ef1f1b1e6901f840aef6f68d5f19034d7489e458ef106c0b9973a3c3f0e382865db3bad2c978ca961f59c04d9c7d4d83929b69e004b9b3df9c7b4dba06a911b671aee141cf4a844677790f367528b74a6d04d46a331465e80922ea0e5c5018a4139f8e42ade52ad872a1a55c3761d1835246f22975e956522c4b43ac43e270f207b33fec83698d74a54822da1876de349dcd0ee8c8901ce48ce7b37121458071d3f1b167e691e03ffe21a824b564d617f505caa9bd57af54ca0ab7faea76908b63c203", 0xe6}, {&(0x7f00000005c0)="721b5eea7cf5ff58ab48d762a047db", 0xf}, {&(0x7f00000000c0)="1475caf5a132a1a12fc53a24dd0c7ea5b5934760938991930309d4206be4", 0x1e}], 0x9) faccessat(r8, &(0x7f0000000280)='./file0\x00', 0x110) [ 2578.925844][T15305] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2578.943375][T15316] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5679000000000000) 14:31:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5879000000000000) 14:31:23 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2579.008347][T15327] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2579.034140][T15343] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1700, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5986000000000000) 14:31:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x8}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x75cf, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r3, 0x80, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private0, 0x1f}}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x3a24, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x7fffffff) read(r9, &(0x7f0000000080)=""/238, 0xee) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x10, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8}}, {@common=@access_user}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, '/dev/snd/seq\x00'}}]}}) 14:31:23 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5a79000000000000) 14:31:23 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6f03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:24 executing program 0: r0 = syz_io_uring_setup(0x2dc, &(0x7f0000000240)={0x0, 0x200007, 0x0, 0x0, 0x25e}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5c79000000000000) 14:31:24 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:24 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1800, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:24 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x5e79000000000000) 14:31:24 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x601e010000000000) 14:31:24 executing program 1: r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000440), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000001680)=""/218, 0xda}], 0x6, &(0x7f0000000580)=""/188, 0xbc}, 0x3}, {{&(0x7f0000001780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001800)=""/53, 0x35}, {&(0x7f0000001840)=""/213, 0xd5}], 0x2, &(0x7f0000001980)=""/59, 0x3b}}, {{&(0x7f00000019c0)=@generic, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/212, 0xd4}, {&(0x7f0000001b40)=""/56, 0x38}], 0x2, &(0x7f0000001bc0)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000002bc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/175, 0xaf}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/121, 0x79}, {&(0x7f0000002e80)=""/226, 0xe2}, {&(0x7f0000002f80)=""/97, 0x61}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/70, 0x46}], 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003140)=""/213, 0xd5}], 0x1, &(0x7f0000003280)=""/170, 0xaa}, 0xbd9}], 0x5, 0x160, &(0x7f0000003480)) shutdown(r3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) syz_io_uring_setup(0x95, &(0x7f00000034c0)={0x0, 0xde1e, 0x5, 0x2, 0x290, 0x0, r5}, &(0x7f00006d7000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000003540), &(0x7f0000003580)) 14:31:24 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:24 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1900, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:25 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6079000000000000) 14:31:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x8881) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) r7 = inotify_init1(0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x304}, {}], 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r7, 0x8001, 0x9, 0xfffffffffffff000, 0x2}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r8, 0x304}, {r7}], 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)) io_uring_enter(r8, 0x35a7, 0x8463, 0x2, &(0x7f0000000180)={[0x5]}, 0x8) 14:31:25 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1a00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:25 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6186000000000000) 14:31:25 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:25 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:25 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r6, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)="bc878a4ce7a7317794fe73d517216f8c510a2748888bea6f078dfc19211120ab55e683c5a011e6725409542ed336", 0x2e}, {&(0x7f0000000280)="cb24974db9da5b47399b2ccf1c6e6553fe1e9fccdf9f0f0bb49c2038dd56975b077ded8bfdb7d12eb50d293b100cbb8acc7466535f7b0657e8c00b9d5965d1402c491e0a595e944e0c584845b51bb275e87a6bdb33dbc638c1d49caa605a5b05c2b98d13080026939353f87b25ce6171d84da517af92b2c7de92567d50284bc27e0f6724bb0e1050651da33e703b8691cd448a1da2462d1fb2ef4a4214a2f04330507c7cf0a7909ebb4fcf4967afbfbe61d3bfd74601bba2c714d823bc9fe0285a34fd110347", 0xc6}, {&(0x7f00000004c0)="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", 0xfd}], 0x3, &(0x7f00000003c0)}, 0x0, 0x44010, 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) r9 = inotify_init1(0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r10, 0x304}, {r9}], 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) 14:31:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6279000000000000) 14:31:25 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1b00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:25 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6479000000000000) 14:31:26 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1c00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6587000000000000) 14:31:26 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@can, 0x0, 0x800}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r7, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:26 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:26 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1d00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2581.853364][T21140] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2581.883349][T21154] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:26 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x7049, &(0x7f0000000180)={0x0, 0x254d, 0x0, 0x3, 0x12c}, &(0x7f00006d3000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x2) recvmsg(r5, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f00000005c0)=""/120, 0x78}], 0x3, &(0x7f00000006c0)=""/167, 0xa7}, 0x40) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE, 0x3f) r8 = open(&(0x7f00000007c0)='./file0\x00', 0x400000, 0x128) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000080)=""/238, 0xee) 14:31:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6679000000000000) 14:31:26 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2582.275863][T21414] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2582.289023][T21423] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:26 executing program 4: syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:26 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1e00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:26 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x671e010000000000) 14:31:26 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2582.423828][T21684] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2582.457199][T21697] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:26 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1f00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2582.518093][T21703] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2582.542666][T21714] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r5 = accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write(r5, &(0x7f0000000280)="e69f34071bdf85", 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6879000000000000) 14:31:27 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2582.778752][T21976] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2582.791473][T21983] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:27 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:27 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6a79000000000000) 14:31:27 executing program 4: syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:27 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0xf382a5ff2a1adc28) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r5, 0x0, &(0x7f0000000240)="9c809593e001c04fb788a9ee714b22c543d4116bb957d9a90464ae45e3f30b77017cfd3356d7824eee55c10ec4a316853e92c9b4587b600ee9442f280ebc092367fb4d549691e147eff3aa94945853e4bf30936221fb5ddf37b54d55cb5976f8b18ebc6e271e1f9aa90f1a4e0631e79154", 0x71, 0x5f8b1f0b9cb8dfe0, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000080)=""/238, 0xee) 14:31:27 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:27 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2100, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6a86000000000000) 14:31:27 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9f03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) r6 = signalfd4(r3, &(0x7f0000000180)={[0xeefd]}, 0x8, 0x800) r7 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x40000, 0x4) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r0, r7, r0, r8], 0x4) 14:31:28 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:28 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2200, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6c79000000000000) 14:31:28 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2583.700539][T22320] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:28 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2300, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2583.745312][T22346] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2583.768938][T22368] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:28 executing program 4: syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:28 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xaa01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6c87000000000000) 14:31:28 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2400, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:28 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x831e, 0x4}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x3ff, &(0x7f00000003c0)=[r4, r0, r3, 0xffffffffffffffff], 0x4, 0x0, 0x1}, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000300)='./file0\x00', 0x414) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r9, 0x304}, {r8}], 0x2, 0x0) r10 = openat(r9, &(0x7f00000002c0)='./file0\x00', 0x400, 0x15) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x42, {0x0, r8}, 0x10001, 0x9}, 0x1) openat(r9, &(0x7f0000000400)='./file0\x00', 0x341800, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r10, &(0x7f0000000380)='./file0\x00', 0x40) shutdown(0xffffffffffffffff, 0x1) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r11, &(0x7f0000000080)=""/238, 0xee) 14:31:28 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xac00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:29 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2500, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:29 executing program 0: r0 = syz_io_uring_setup(0x57a9, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r5, r0], 0x2, 0x0, 0x1}, 0x2) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x142, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r8, 0x5, 0x0, 0x8, 0x1}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x100000000, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r9, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r10, &(0x7f0000000080)=""/238, 0xee) 14:31:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6d86000000000000) 14:31:29 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:29 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:29 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2600, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:29 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6e79000000000000) 14:31:29 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x24040, 0x100) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2700, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x6f79000000000000) 14:31:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2900, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:29 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r4 = inotify_init1(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x304}, {r4}], 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) shutdown(r3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7179000000000000) 14:31:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7379000000000000) 14:31:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:30 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2a00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2586.436558][T24010] cgroup: Unknown subsys name 'perf_event' [ 2586.447259][T24010] cgroup: Unknown subsys name 'net_cls' 14:31:32 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xbc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7579000000000000) 14:31:32 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2b00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0xfffffffb}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x595b, &(0x7f0000000080)={0x0, 0x4bd6, 0x13, 0x0, 0x3b7}, &(0x7f00006d3000/0x1000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000180)=0x3084, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x100000000, 0xc0640) sendto(r5, &(0x7f0000000300)="ce8fcd0eaa316412bbb7e8baacbf4081c54be4aa50d8f31191cabc5af3", 0x1d, 0x11, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @remote, 'vxcan1\x00'}}, 0x80) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) dup3(r3, r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 14:31:32 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x0) syz_io_uring_setup(0x942, &(0x7f0000000340)={0x0, 0x458d, 0x0, 0x3, 0xdb}, &(0x7f00006d4000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000500)=0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r5}], 0x2, 0x0) signalfd4(r3, &(0x7f00000004c0)={[0x100000000]}, 0x8, 0x81800) write$binfmt_misc(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a3151c59a106f1fcd3ebdf3d4ebd1a7d458cfb663ca1ab1f30a1d24dfbc492fd0a0a861b909d588baa6e6c5c741bc680604fe0a31df17063ffcedd3f81ca469449644763a8ba10eee4db2416df537544e3628a32a596ff94bc0a642f5c9db2878bc6f3a1a3a8b0ec9ba1d9e3e9a81732fdd277306c316c569616f5e86911f2a4cef07a98f3a64463b51a008cb2026bb240b89e082b68c517a8914ae882658b454502c15e4dd153d5b7cf92bf5aeb374061503750db91565716438e900f2f22fac1081f4949884a1e916b02281cad2f86974426b1c8c3d5fdbdceaffc1fae7a234b5791c98fabadb"], 0xea) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x9, &(0x7f0000000180)={0x0, 0x989680}}, 0x748) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r10, &(0x7f0000000080)=""/238, 0xee) syz_io_uring_submit(0x0, r6, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r7, 0x7ff, &(0x7f0000000400)=[{&(0x7f0000000540)="f83dc0cd242d811140a6939162b2cb7d082da56db58697a9252b009e4c5d5be8fe01e96351737289de31afdedae7dbdb5d9209c286bb5c249dca087df503742056ccf22fe72c97e821cc325319bf1cb019870d52e368ddabdcc6597ba75506e35b4ef23e335f7e395e6d61a62fb1cc9f87d281d4beefefa78c64fc71af45bac8f83f1dfc996d75753e8c9c919bc4e07c2470b9fad6a91002989750604aa910cd5d26acdd387c62edeeecf17892ee25b0dd8ab95a6cb106c70e", 0xb9}, {&(0x7f0000000680)="df8d92c74c848b3c8f5b5eb48008c9acd3cde2a4118791651d55b2724adc1b4fadaa2f3a21472692b53bbb8d4f3c9186063b7f83bfad1d373eb58d29fdb8d4fc07e7b1bf045edffdbe8997f195a4c11d6eb4e7aeef21e0eb269327ccd2e6e9885b3ddb433a7767c0a74195616342c93f38cdd08ac62575ef266739dbea4d90366ffa1227cb653c98fceb0198753ed2d49e1bbe992ce0ad75e57464e2e9a67bba7972737109459cf12ff8a63927d6f24f295bc90cf85ec4fff848c4f09e9657629821e078b009c7156d4391d9bd3d87", 0xcf}, {&(0x7f0000000780)="3e243d3baa3a88d7cc5152298c5d8b826614329d8d52f49184ca5549950e2f6b0c076de91f1a35442e5c0ed302db16a82be18c8c17f8997dbd0eae23f2e2295c84325c6fb7d48ce5c576fc598cae998ed9a5403c9935b4b5c766f1b5f7b97a5d7daeec9379e7dcbba71b4d8b6755a07dd22203bf82836e2fa66062bfc01a93994d", 0x81}], 0x3, 0xa, 0x1, {0x1}}, 0x7) 14:31:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) syz_io_uring_setup(0x1095, &(0x7f0000000180)={0x0, 0x5578, 0x10, 0x1, 0x2bc, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 14:31:32 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:32 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2c00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2587.920541][T24529] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7779000000000000) 14:31:32 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7979000000000000) [ 2587.995984][T24549] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:32 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2588.035792][T24622] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:32 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7987000000000000) 14:31:32 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcb01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:33 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2d00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:33 executing program 1: r0 = inotify_init1(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x304}, {r0}], 0x2, 0x0) r2 = syz_io_uring_setup(0x189, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x3a28, 0x0, 0x0, 0x0, 0x0) r6 = accept4$packet(r1, 0x0, &(0x7f0000000240), 0x800) shutdown(r6, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000080)=""/238, 0xee) 14:31:33 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7a86000000000000) 14:31:33 executing program 0: r0 = syz_io_uring_setup(0x200187, &(0x7f0000000440)={0x0, 0x6fb3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = eventfd2(0x2, 0x80400) r6 = socket(0x26, 0x2, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004b40)=0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = gettid() tkill(r10, 0x1000000000016) statx(0xffffffffffffffff, &(0x7f0000004b80)='./file0\x00', 0x100, 0x10, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000005ec0)='./file0\x00', &(0x7f0000005f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r4, &(0x7f0000005fc0)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000240)="a2cb6428743eac8444c80ee1c215736ad2a3224d75314973fd3e0bbacb4dd0ca672fa3c6ba7c82b0a294f02f6a926720c0ee1d847da61ca833809b3ff070bbd23c6090afc43d63354e67566027527ab47e8dca7079318de248b2b40e60d6e889254a73ab94a128e4257d727a6b5041015b040398eb27737a0afe16fa3670dec5b85ffd411642638b2bdbd49970b1643fa895073e03fa43c52dafacbc19ef3575f6b5b3088e9fa72560996910e26c259a584cec8f195f8a3ae27e261a5692709f181ec3df9285f5", 0xc7}, {&(0x7f0000000680)="c22fa6d909b0083b26bfa90d84d539482dba04c3c9043a66bcb0ea41bb2ea96d8a6f8b55adb9f0c897da4324044eadc4d8b7d9d365c933588b7105931b48892af307705b930d29050e2e68ad0b7d0f0aed83d1e87dad45bcf1b283e42b5b9bc9a34853c839d262dd6d769a59984149cf759ea44f06cc02aa94993ef71890193cc638311f69610b643782feee982c4247c61a601f9b3fa41c2421d212536e5bf8bc7b23ce197a62e288fb2ad023660863b81db4f4280e53ad2d8ff577aada8e3d9ba34c2b01628f0ea8935045ad6f9299c4f4b4a6f6939bb7690a1a19a26ea7b93bc4b5b26cf284a5d8a6ebb8fc2c58bc0820e56e51eb1155a5783eb3ed64df23bac04f0b47380509d4ba990de27266ec733b168394b0cc56c68e15498a56f73c08af3d73f36f649d257dca7eda09132e13663ac8fa789cb63523979b6371ee36b54dd2c67938aff79a63bb8e59dac2913e17d565d67ff856271577bd6294fcacd7729648f9e6b121ab2a8600ce93872b573b6c75c76bc57a0324c501576cf820bc226f47b68c708a27cd77ac3c080cb8ec798aa9e70b2d708dacc0aa73dcf45029892fd38a6ee2c76999531c8651ac66b387c9f49981a905a84277ac81c5fbf99222af1c14e9fc7131aa35121fdd5a2a7c8b1408fd3ec320bd6cd0b37bfcd7e8f9ec472e5a74206628e33ca7fceb215bc79c9a9e3c913df8516d47139d22aaca3774712670adf014ed91a0b12df862f51df1302dd10097034beafdfc980d4e3a86e4ec7ac23d46d394c989590fb705a4f8219e72e9e92518a5b41c72a33ba27d3ff6d35f6253c589464f8222d546f014500cdf4366915773d72de8b04758ba84c0e4f0de15deba1f16d123fc939cdd2966db36604d334c6ed1966b422f7701119ae3911a2eb7345d554748ca500431d0d796f6d411eae4fcfc2c6192f4c53200bf5dd41eb710103c9ff559cc2782e6e2d3fa71ac80cf2bd479ec7e7e77221a50ae064f02c6fb5e177b439b0fedcb9470973772b6e81793910a70a24ea3391a2162aeab7e6908a2faa3bb5a68dfbd439e02590ce26eff904488fbf58f1557e3ddd7eb6ab3189e74c5f37b3e6a7aa68563e7ec689a34c45a1ea4e3094b8bbc35fe996a1c3290610e3f969b30ab6c2ba6122e3a8be20d5ef5afdeaee32cc7b6714168aed40b656d8efdbe916d199ffcf7ab9e2465254b74a86b0184026f86b569abd4a018277b6c9b2b2d703acb23ae452ec0d668858fe13580ae2c1bae528bd8e5d9a44f29cfb2d172eb9c14464b43a61478d4ab8b93cb6e6a80ece3ac3c3e3be61daa5c700dc1e17f60b8bbba6db757701794c2aa9daf66385116b3bc60242ebd556a436a9332f0d6fe00ed4c12fe4e728b1b7c176e8c76623b4144f37ce5eb5193077e294259a1ba5e811cde57aff2079bed579289977930a76466cd45d40d6c27322c965151c7fadddc177ce0c2be9765a1e00434c2a31d076b27bf3075a0178697087c8331358cc9daf52929e6e6b28aad7219715382cbac664eaba74413a0ff7569e6572dc51d921a55df17e91239dd034c109da265df6b06a40a3b49c62f1f104ad6d23c8995fca2352f68e8aa879c05cde927126fe6152b6dd3d971e8cc12ac512ac2d5b5c94a37852b66582fd10678173813f5ca7627080eb881eec1e50b4b340ede5854b4b9020eb9f22c538bf2fdedc3016434b9ad49680313273b17550873d88958ce7d0a751246583e4e94998cca909ee0a1c16c6a431dc41310e8551c35aacea3e9cba9830c95f8adb6c3e789dc8f1327559ee7bf1411a489b0b1646f0b0fa29ad3182500318e502bb7e16798dfad657c2540e75b5a8f9efb126d9db4a3a7ff93d91f60a37b148bc4e6384ff84df09317c23ffc6b28986243074860352bdc22144e258707cf2e68ebe216f90b58d8e5e8724d1988aa6b37fbc7e92548b764ae1268595ba9701eb0c0acae1b88aa7f9a2c5a2d7906edc1eb9ee643f1b8385d4a3652058246d6dafe808417069d8f5f89b78594772d634de2d7999880db837ca6a2f388089421adb479995f097070808287c35639bb72956e5bd7282b0a25692f9c90622ae8148cb15855fbeebd8d02babed87ca9252365d131232839e9b69a426f528c5d81b18e616a2888bd01a8c9763d0d6ab88c2f48d43394d46d43f9e951f5a7b656a37981c8fcfac846261aa9be09d3252ed9bc92b37ee90c4bab0372e056532441d5a86d8ded6d9d881acb123376f51461a597f8fa7715793fce21904935d221c1194a8048544ba236b8c8b5739b44f58aeed414037657094926a2aa29ace2502a30058b2df5922c8a054ceb26522f6fc48269a19450d8324523042eb1d0b823076e2f16a7d25071f164d2a9b1cd01fe6cd0f17d1e1220838d7083e68d4ed518aecd0d7b36f411779bcceb211f0b825e8fac9e5cf77ba8b96f544642bc0b1dc0f96eebdb7d19e3742ef9f44d7b9e83a68d97bbedfe9a2568a840e84fd76f8823b42e5089be01032aa05022c98f0de67a956c39327c225033d4f20f8721cbf2c66dc745227527bf86d25b06fb4d85ae54ffbea78ca804134fd0b9fea4028d87dd9a411f15d001138399153ba2538117c08e84f36d819ed5c3babec59ab51d429e986d3a8fa6b03afc021b5e35b79fd3b9e1d52aee09f806af1242c76b5047b36af6bb7c2540ba57bfa228d408264eedcaac84bfa486406230e12eac4c7fff7290133f96f4657a89272b92149846730fb58e3007925aae1bb1a61d40f5bdfff389053bff5a680028198fe64869cfff9ceea158394476fede36bf52319a338764dd0700cb4f1da32ac3411ad4e16f173996c6e730d779645cd52d66573f83cea305ec6371ba6e82b22b05389f72075c03ff50187b32615899830524cdc86c8296ee0eb61aeeac16825aa44573920ee5222b82df5cb37e4c50eb91f7c43698dee7d83d134b58e5fe00020d5dbcb863da0a3103bea7f146f3294d6c4fb07e12a50e75413f1354d8a92693c463873bd8c387fb2bc8b50fc23a85a840fc05af2a5f56295d5a56f3ea03c04dd62cec8675236ce243b24d30a429c7a26aa69bb45e7a722f9f54f24d91f4deeb4aad41e0c37414d335aa38916c7bf3c8f54d225dce1894d0cfd8b150e7a650516a6fd2b49002f57d77da4f02d0c00a723f32917116b14fc61fa6e3673a092a693c0b3e58ed63f7295f71a160a0f6d66fe7464985b1283a4105f6fed7a9cad54e39ff10080c85cc10d6dde18fcc8e06409c891f2cc0dc75b2cd5e93b22773cf354ff145ecd3eee1259bad13116954cff1aeeb87309e2ba51c996ebbdacc61c07fe4854440d41b847470f80149f30a66a842f6ad9328ebfebe5f544866f2491eca9d8f19408bf91fa3e27b72907728ddfb86d4eaa907ca89f5c271ea2a3781c1570447f75334d9b455e804e7fff7fe539107d5d1ee13fc01072462c71e32b7ad60b8a649ee36763a01b492c273ec67b799a90f48f7fe0513ac41703ade41a778f6e45382dafda2d275a6fac7ba49ee55639332da22fb446ceb39f4ff90bd2880ac9a133ab8c0047cfb4bdf4b6aa79c390c98e958bd575ff40b69f66607da291d0202fbde8ff9c1ddc8720c885986c47c7c6b7af5ce07ff0ed24bd5384a90f5a89627e5f2ee2b5dcb160b06a309b005aa8f88808b797438cbe92567fd31b59418100c83ccf747d7c26c03ca45343f2936eee63bc4c70e782170d8e2b370cca5366ce1e168b4f02ceb4fd6db86aabe8ccc24ee6a5785c321e82e5afc691ea7f9828140f966f98e2af50cd51f246877876d524ec87d8f311bb2f169345dcdfef70160eec38e34c91e2d04c6cc540e125c041ab069245b9444eb7c41c8e79a1d12fb7bfc314b20ba86003f74f67ffc18c750b9f2e903ad3a53cc2fd0fdedb2be0a3b2c8f7fb84f466827af9d8724a3b984cbea5336c8993232331c503e2ddc5e858784b9d9ca1b326c332ab6a187d282cef2134f2559ada78e92ada1235d70ffd616e6ec3e2f86d0fd7c86ac9bd8080b9a67e8c8b85709a07a24eabcee6ddd13db6ee69bc6d879dd6c622b5ac6c79d278c03ff5655097e1f8118c76202a1efff147870eef644d14ddb88f74eb9727ffed3e5d3f5000e299166dfb8ad6a8ead1e8ec11c1534572b74a44783db6e0ed37276eb316dc829042534468f7a90f9f1c9380651d8930952abb58f23e96b7d50d864a043569c57b720c7dc8d580e3247573026a2a9c9a9b055b4e8cef7b3585ec3fb0e814fe7da52ea447bc2b05e21b67eda1e5400ea3c3787eea9b434b8fce5b0119b4201616dcc4c476f4b1265a5565b67e484909c25fe0f6c34e8ae12b11944151e319301d0c8204618749bf080c979fbc5d667d200574f7a0438a768dda65e553aa919c7602aca3ce8b67bac2b95318b4702fc0370170d1c766fc9075814794ce706d0f38430d9d277cc22c1cda2c7458e05fa35e5023ffd4a8ad4eb5b27b47b91e3ebe3c54cd05cadd3cd86030275a7690cb8e8ee39865c7ceabe50743fb3c81d499da1adcc633f8d6cebd9a0c4678b87f7b53abf71dce7a04a59c0c5381b0026ec8d9d5b17cacc2567059cdb4af50fd08125bf5148e40b16b369dfb9f0d42454140d004f6cd23de343cb61d10057467d4e7ab6e1697ddf5050e1d5c7993eec2c6c1c7e796d523adf12e89186fbddb2728a06909636ea7a4c35176673b7b3608194edb5f8b943fbe975b096adcf2c3f901b63de218a4f21858d6b1aed9990cab4b8c06a803aaa1baad436951a9cb19981ca29d116a692f2eb863d9f50e519fc759a39c49ca24a4138c6adf7e4b79a01d0a1e09a0eb79c0cfc2e6ea9935071b958de2b53e38d90d2aaecae315b5afeca627d211a6995494de25a6fa68e0e9cdc8f32c510f18eb4aa4738d92c2d871b22afb910751a8b38c66be832b276c7506b8ade4dbeb8dff3f4ae034cfab0c44d947114e3d16ea8f352c47321771cda1ddbe2c68133e8e2aec3c3c31df88dd77f96406a48642bc31119c1bfb1d93444764378ea16a4ba069dc36fcbe0dbc691d1453d050026d02523e15dc97d66e25e5f7df5c9265d47b6fec707a4444aaecbe8d9032b5e96654e6e2bc9e02809f471ca3ac0e0023e310ccfcae435ec8dd16c73af1eb4a2fca1082854d0de8d327acbad4cdc822b979e63ee023dfdebe3f6ac4cfe8006375ec2ab0f7e29e7d95f1028ccb93364a3b0632ffdb581971eee730d4b368fc0b12bab3207940b52548cd8b9b038747b44824433d131035d079a3bc09ae4df8b363527feaa2a1a11403241a7d3032980ac95a6f45db0928da900553d0ddf71851333c1f8dc3d7f82eea7226440de775cf8a81d3e04a02691f9257a918187e89bae706d6e3f2aad8214923741a09de0dd0bf6308f039e85ac98529e9cd0fe3a2d24d61696ee3e0dc88ba614e291f832cba25b3d9af14849626559b0d76d30ff1b8878a52bc1147a7184fe3b82f03dee102bad03378b516e9442fa094cb748883b96e4a7aeec1f1ac60ab3261058a01c3b331c6af4420766b970132d577d20d7e313c1cd88dd3a3855645f9aa90dce936dbc301806a6f8f3da7d862f3c685dd59643c53bb2518342edb20c8704d7ffef502a3265564eb26941e76f28895331029d4d5b29d726bdb740fd578055bc0f7e1850d3d87240e2f1c70825e9dba9a4a4091bbb4c430059de00373d51c6f665be9cd9f7c051cb87292eb44902212ea35c9976613e678be6fb96388833176e11b9adab9ffe2219866386ae411953635056f053268269566e87b85e0e1aee075adc88", 0x1000}, {&(0x7f0000000340)="098b9c4159c33b6b6176030d169d100331edb5bc6ada8233ceb350f6814f705a54ee85d8986911d5ba1831a73774577014514c10206e763f808f30329fe051ea45725bebfba1d144f85596a51c6103418dd69fd0e42052728dd573e9fe405a77cc4fe5df7c9f122b838310f9f104217e863170d91ce372f7f977283ed7d475d10a7d35b82e7a8479fab3f6b4914dcc3a8daa1f90f774623bd5d630b42d34ebbf17da63bba324f403cd533c16b676137ee8f169caca", 0xb5}, {&(0x7f00000004c0)="b695dc0947ba7eeb49f982f1fdefaa4a9cfd862670c7842ac8e6d6da7eba8c03b259a31ea11cbb9510988f4402307348cefb4d9cf0e3d39ea84d3397a3b8efe9ed568cd00385fa1adf19e8fb30b9", 0x4e}, {&(0x7f0000000400)="ce78e0f0bbadd692460b1f2f01e5a0ab40ee5f05bebb4f08d11447b68f5413b5559beba4f1bcde", 0x27}, {&(0x7f0000000540)="07ec2aa1527658f80fb22da5e773b3d6f9a8730c130f7eca5e5776f6e8d8837f2376a2b6b4d6f1886147779f9e33d61f02363dd12adfbdd48f7176e68538e0ca56637ada951bc07120259e085909d7a0051b16edbfaf41ff63d4bb7c24bd2a98fcc3e2a194d19acf31e8aeb7c07c9511d9010aa2bab9f5ad13c7ef02739c5112b91f02be9d109be6aad2e68e1925e1e44448515655b6136a724c0cf6", 0x9c}], 0x6, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r3]}}], 0xb0, 0x20000884}, {&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a00)="40434c918a649bc3afa0fb4c2d3998edb3824f6486152f0e9e53e4f120e833f656e9ba335db4f8c23f89d59011d77ced64b9b3f37e147ff846ff02ccb17187eef6e97b04efe994318e0350808be684d3e8d953afefd64327294b040cbc50132e240a9368825a3701df8a1a88a49f719252287ae328a5cb0e5c7e59d3f36a70f94a1e557c49ffc6213c4fe3", 0x8b}, {&(0x7f0000001ac0)="4f2d48b1f324b0a90486251a30b5dde8f63ee572e75d314d0c3dfbd758f5fa9a469d53901fa4b3f3c1fab4cce73d8b44bb4cd74a81b415947f7bd3fd4a5afb9b2fc3a41d32a4d6086c5d3c55def9b73b48e2563e6424fdc273c0cee0b01d387bb9c037282d4a3ff18e1df3afcd8fef32099759820bc9f2", 0x77}], 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="2c46fd94eac33af63e389cd9020b411837b4153d000000000000000100000001000000000000000000a718e351ad19e6822c022fd892808694ea18b43c0de98ab10eb6dfa25e1f07996e8a1d9da113ca26afe6a8578d9a46bfc14d45d5e6688a49", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4c000}, {&(0x7f0000001e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001ec0)="a4488b5980ab2fbe88666d8eaf113d91550871d444595538c22b9a706c64f4329028d4d3a18728084439784675f0bc0af26238e14ae0eeb16833bd8e", 0x3c}, {&(0x7f0000001f00)="3ed07735063e7fd59f65a3c5ca76aa0585a8e2860e1eb7b6d174fee71a7a8bd1bdd450c4be83b1ac0c8ef633c20d28863fb4e4b18f8d714f712139a4ea2352f9c679265f198af47b486e8860af7e277fd852f17578c1dfd26a1c534aedef", 0x5e}, {&(0x7f0000001f80)="def63b392ef515762e8efcfe8920b96a9195da64f7615bbe8742dedc6b68ab9d036a58f90a3e2ce22aeaa76e3982f3924426f66a6ae730bae664aec689f8e86d346c427fb3cc8581f66e06ab3bec4e4d93bf5f04289cea9f75230e363f55c67f68c05f3c6226920f5f7a2400dcdb9f32806d4b30636ad6bdc0a4af524db253c2fa046bc20437717f3de63671eaea65d62d6f68476887d79ddc388ab466825305aacfa14a9b89abb4383c0969002c7589d57b76381ca6f574027668cc21bd054b5a8e38c6c70e74cfb1b16586fa716b91f9e86f1c2e6255131a35745fdbf61f28877d3cbb", 0xe4}, {&(0x7f0000002080)="7f9754da00b9b30183b5445e456f0bf5c21439d3bce8523142e2a4e13c644fb10388b8278277c5e5153b162b39db669c536736c27ea0b4bccdc8979da497cba64a0b5d40d4e5989957d0c45f6751563bbd11a3d280978ebdc5f2b1183fbede5fa91add1d010195131b3947e64adf10dc3b6c205ee8760e25069efbfa892895123af7a7cc5a4c489d88cd82d4ba57", 0x8e}], 0x4, 0x0, 0x0, 0x80}, {&(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002200)="cc808f01cb25182245207c1055b67e3e6ea83928b6a00f9fc35438d40eb608c7f221e5d3a698e8b1c023a48c29a8c56451c57aed026819d160d4f6e44b647eda700418de5f4e5b54cc637d201c4637fb4b21d2ebeea3fcbacdbc10a4566a9a4d927be94f9701128bc05f869b93e2f7b354e3a0e818f1d2fbeb4b9cc545ab5b66da034a67edd8da2468b200f41b2125016fd2a20e4982ba6600d5afeb88722a499af9cfa726f371b27a262a15e73cc883af486326df5f137e2fdde95bcd9faa45725350a8166610b76729da1f90487bfd64cb0c7f", 0xd4}, {&(0x7f0000002300)="127481153ff4860ac9691fe8083079b79c7960f1eb8353997cd68337c3f8e6a0f3267cdff884e412099828e80b2557592e1bb30eea18f329a983920a88ea38598565c5d44995d6adec4519e326770433cefec87cd5bfad2b2cd529603b9a2501a810fd86ca1e3907408952a2568c34e9871c903861ba0925228ac352ca3121485fbf8e67b4929c831e31bc0cbd50c4d16c231424977cf446d2d747e26ca39cace12c0bfa0f46471a33bcbee3cc5da1c74d71246742bab9add1cea725076c3933695d2f790e68ead2d767f6cd1479da7ba2d51d0311419c8c60bef9d4c6c74f7aeeee35cb5ba466d31c5eb0021727631557", 0xf1}, {&(0x7f0000002400)="f5518fb4e3192f3ba3da5948b498a48e2ad094d03324e743d16436b5083eae5c7bdc48ee408be7bf9cc5fe424e391df8bc91ce5ff7bdaa69d05d4fb764528ece363342f6b6db18c077c8eb490b", 0x4d}, {&(0x7f0000002480)="ec49c20e06c685939f9b0672a06bafa4e425d043cd4b2d90f24c7ea22fc988f111e7f9a5d3f83076a9d822f3837dca5488b33d2ac1ee1184676b945a322b1f7871a4ffdef1a21ac41def49448e803b9ebd6b10dbf2c66be5c25d5f6495c05be8324e84bb39f4bd1a89048b4d6d05d19724b8", 0x72}, {&(0x7f0000002500)="f937abe534777327216808b3a638941ed6e6858456c88dffccda5096559fe51ef839e1bbb87695485ee5c15a7bdce91fdca7496bc7d9da3b4e75d05f3e9c192800fe991a08f95e00a2783a92a0acf68fe66497297cb47eb1669998a94bf5964006c6f58c541f9cb6dded9ae5", 0x6c}], 0x5, &(0x7f00000026c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x400001d}, {&(0x7f0000002700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002780)="f8489cccaf41e39baa844c1dc7c48a90487c585a80b612be2027a8c6785dba07", 0x20}, {&(0x7f00000027c0)="dde01f4cbee24ffd1422", 0xa}, {&(0x7f0000002800)="f5a647b7480a28b7dea4bf18c009aa8a8c5255fb9250c644e178d9be077bdb73ee2604ea8c4b6baf65de88fff86fdbf770d9df509bbd81ad32997f451cc2f2cbe8e1f18888be93858b9dc4042bc9023273980692943a5cb2b6743bab38", 0x5d}, {&(0x7f0000002880)="3b068db5ed507589a9728744d057acdfdd8a854385f274e0e484b5e7ee89546516ace1463ae63c5582b9420364c578eb1f60a5ffc8c8517659f53e912d8e3e00fd10bf85f592cc37573e88b6e8bbcec5373c85a00e6a0b1271e81dab6ba18a985ab52d5f10c42b523cb9dcba05589a5462d17fe62dd47c9550182a57204f56fb1c4b7736cb0a32974a09737bb915513369c773c0dd97483ad7e8b9bc7ebfffdd5c7f422d4040821b5bba1a7d73649ce2db182d53a73f4a01b7a1c61ae91f1ca4746bd6037b0a5755", 0xc8}, {&(0x7f0000002980)="6e6ed03cc75409", 0x7}, {&(0x7f00000029c0)="d2df3860da15e0770c7e51fe9fb366c45425a58ab80f4c84094ae082bfc5b897f822dca4912e0d3af81ce912edf0575b0e32f1af8b1949d47430126ad25891f9888e0c072517de2b2c2e91ffa0f0f87bf5a8116a18edaae2e29b0ba8bf1c0720c7d06e96b14b7a131fc3608265a86e4e78789eb04bffff89c721db36e729d41443dfabb25b6d47", 0x87}], 0x6, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x88, 0x40}, {&(0x7f0000002e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002f00)="59f669f81db9e8bed2d57b73438d9a7143453005297f9de68bdf8d3eb98c", 0x1e}, {&(0x7f0000002f40)="7a9bd7467563dbb098706f", 0xb}], 0x2, 0x0, 0x0, 0x81}, {&(0x7f0000002fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000003040)="5fb35a07165d83dfe76200e91c80", 0xe}], 0x1, &(0x7f0000004640)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x140, 0x20000080}, {&(0x7f0000004780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004800)="ce92c67800ef3d4fab5ec9800c68800d7f9e758b0c07b5192467f6ea9615d598d7a9bbcd2012adf3c504b1f24bba1e2ff2c618ac763b67dd409cad490efe267ad064ba755976b0ec9d57c2241b56abd680de924b9b3c07e43fdb390b31195d31acc524fb4d7605fca84c309ae7be87df31e8917a5f048bdfae4a5edc5c343f36efe8084e32c03b9a23da9ca16f8cb087e63e3f1e8d5257b4f39167b0f5a8a365db3e51ad24c863dc6f00cd7a93fc5c3ace28a84ee3b02c11cdc7f383fb", 0xbd}, {&(0x7f00000048c0)="877e47dfdd7bc8eb309d3bc97c3b039f8a7faa06c74e0b1312165dccb189eb89eef280434d21733a93db5c59930665ff174fef5eca974c28b2c9cd17fbe2aaa80c25429d7c", 0x45}, {&(0x7f0000004940)}, {&(0x7f0000004980)="af17462471306ae67d8b61eb5c70341043", 0x11}], 0x4, &(0x7f0000004cc0)=[@rights={{0x38, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}], 0x98, 0x840}, {&(0x7f0000004d80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005e80)=[{&(0x7f0000004e00)="f3adca88b4c845f59228559e191824dcc90a1883c43c4a87f9c6534a601e608073aaf099f8c40cf5e6a27c10ae49fad4d82d6d53c0e300361f818ace18fb2e58dcf4e3d776a5508c773c7eac554cb6ac68ee659b117ec6c9251c65ef51c726642328e6c637393f61f527f454af885885f153600a429ac94f3ac5fdfb751c40d55d4b7125739a1f16f807bc5b320b221b0ae339dd75aea2ddb8c8040d28728012c5c2170c3b5d4dd4ed6afcb9cc37e4a739379706175db299cc7844e2baf53f962418094b524d5afa41abd1c87aaa0745952b63b78a93a00eedb46982f2184ba6a22cb3019b9c2e15578fa1a4c3843b4bae93cf67ff6ef3f33f88e0e106c4cd6dbafb4b6e1fb66245c57a88bbaf38566fc2cdffb2eeff110ffbf9639872567ad9641fcf3da82068f509838bb742afb1c8d74ce38949f198d5dbc29397e2045737129a6ada71cbbc28a1eb00d58afeb2edb7df02ad3a1c0227b239a216f5e4abd88aa7ccc4ca8d48cc7f6c60b9074ca478a44441e80f314424a1f24f3a90b4db9668d826fb96442d16c5e4c24a1d7c875e74a5d7ae97878e1122b4cdf7df30fd8ebfd810e20a5bfdf48a926d322ae2da5cfc03d12e0c3b3009888eb56106674645505975df29ee9b6409e477a699c40eb8d2792e401c9ff681973c6692b8b02e7a8abbbb69df32c86b43bb1aa9a8289aa0645db22be9fcfc542f32f1129c3d0e3a4b3e47e2f8ef3407efebed7bf23c75803c878644a20c94de16a771e743ec04dfe3d60c9ebcfe62033fb6455bdfa4bb297ed07feb4ee175304a1360cc2fdf03ab4ab2a9fe438414801db35eb6c7484c32f2480a8d9a3d137461a1d8e51e0901a59a8167b6768011955008d7bc2e1ac175e3a22b910115144193d2b6c1d768cc172295dd39ac1c262bc61d03fe848a88b4c3d62ce6df977b4c9750b3db464cd46452577d4e54e813064ea161234395dc657d25742160d1242211f081bff95146fe84e2c909684c9d26307de264e95fed3898b064b879f23ed52906dfedc2d99a6b03449fa2db3cb6ef885498989ddacb385ec4993118820f803348c8421b283b60637c6aee8936d1e9bf2cebbe4a81e54871e3455f3faa89007f34cda77031d2999846d3d992fd07d68ae870ec924a32990a478e97325c0d4fb8a83938732b4b5e5531d21b887cf6cdc0ecb724516b2bb23f1919a86c37785409fd95647a95b5062e3eb72a44fc82d8eee95d881e7478c3739a3456b688900d8eb3a04912a9f42594b2e0d4b1690b1ec51e8af9708831a464061f272a45f101ed5ab4e502dcc19b4e2eb09db29bc01d3898253edaf83a8c435404b86a560fc53ff0b75708ee6e670d4ae93eaea89da38f71a9890b9dc9eb43c6cad83aac703e1980b87219c5f55511beacfafca70803baec51fd694a370e10dbf336296a4dd8a4564b77c99b698b106ea7a38c16769a13a07af225f685376334aa762aba3f5978748df22590c635a2e7c26e4ddb0f93e4f6da666c7feaa513c687ef79897f9e13f07a289cc0c5bc55c6b16ec9fac7500ad352e1600eccafbb085dbb1885d026ffb1fe54625fa576f086fc1298a13e673ff67887a0f015f28eb4825a36d9db997f60d1a07422545c9a8039f054198ccfc4d40e80eecdd272f6149e2fb5279a563126ebb9d974347c560d0562ac3fc50eb44b117c2e4f0eb4e459bb4bdac50f21be117e4447db9ed50dab0b7a387beb5fcd17ace671c963510a39dbea54c3ea3076463381f1d8b5ec8121ff77f460d7365b1c7f3cfda179b92c3da48b9278f4a0536dc8974a3eae8a658e29471f3d709b7a057a8f0da601e6b084900774b138878a955f74436cf40a1a2c3d12c3c7e070d65ad9775212c95ee507a03c618bb13899c4e49d3f06eaede9b268632b2f7808f2ab89180368f92481eff7c9f0d87bfa98d2156d099c6e2f2c25f6e6f2e96f8f52eb6f49d547a8175936e63cbc21a1bd9c0c9ee9b97389ae39618e14583daf6681ef4d64eaa6bc5fa328176c4d61684478fd0c82ac392b28a4c82f27abacf45a42e94a3c240526739670b671992493cf0b4aaf8c12e4553cf29b8300485d9dfe0b1b999cb8bf9f116f4202c202c8897a136e61bf8f65eff804ea0d8d5460e1af4f003fa30a237c1af3a0492abde662c49110028218bf3dc7e7dddb562653952c3879aba28f84caf2df6a46939d2e02b08c315c837e7b0d0e3099c33fb01254c8f9341e6b120d5738d0e50577bf3306f9f18eccf23c4768da1c91029de3698f6b25ebc14de77714fbc8dce992cd79081d5f3e2253b36df30a93289283df66728e9b13c53a648fd3d264d79c21a03243e704e0dd95da9b7d4bff1ca43318cbb586b476730a69a3189d75c050079dd7dcc356fc18e924b06312255497e06715b27217cade6d9078e9e631018348ac7cd2f30c413dad9cca7b17fa92824e13d88cd2c584d1507c28d6e4f175f6bad923f61d5fdcbb0dbe0d1c3991a93357db8e984d4e21ef4f8c62d8e50ca219c3b4eeb612d53ab919183e9fd327f803f56a83f41710a28d30d127732121a328b61b3674543db7bdf37e2e59d89eebe57e0f898ed0c73917ce4ce2cd18480c8418029b42ca0e2cb51043c7f9d859d05cfad8976a611671cbca94b6009417c11d9415d80ae3d9ed820b8b96027a89f22308cf3d148222d9ce2ff9b553a48f2330073418eefd23fa8708a65999edfea1ea5fe880a31a41dd5730a7a3fa62529f5805bfc9044e4b9814b2115391014fde237c3616dfcf6ee0141c521ed4e4011c1d87b9e2104b452d38e809ffa8150c28e775311b0c25de7c8a12f445e1d54de0cf3f70b49528df646e8bc306d60f457f894ef88889780cac40a6b47b6cbf62a81580b944d3104a5ba49b88b88a7cad3cc9c56fa849f9fc2077de1e3eb13543de6a9c1afd520061c02e9f14276466bda4a37013b9357f70d65376b31d3fc91aa0ade8479803a13f28f8a7343cdad1025599d879e34a91ca4ed0bf33c0e1ed79a2fa1ae03a5cfb7218f3e489d17ee871f31844e7ab04435c859012905588e1e5cf85c136d2eea1b47f5c4cab07c3843e5362e11989e0e73142669916fe9169d20419a993ef7a94a80ed094770f7d17f4543c3c6f4f352a3a0ce6fb2a254f5ade3870f1f53e333e0d9134c8894628670d94a0fdee2c71ab5e0a689d77ddd20ceca84987a875021005bc1165ae7190e0f1f214e70b253b4a9f526ed72edca34bd096862725d44be07525966557178e9214f9897c956bb6ebdb29c93514719fbb7e31847642429b553a39cd13a99a55abc8c62c7d75a6d017843310aac7eb0b56dbb35f7c940ad6945c2be41284cf56d1724df78977dfe652c32e7785090c21e6741c194dc72ff620cc8467e8fdd39309e57c98659dd5526c9eff49c50cfdf29f8b9aa9347a5cff42fa1a790e40e92d26ccca4e954ac5a3b5dbcc4da92e791f0c90c26c647c5c54ee14e653aa610fd7eb392ffef240fd51910674d9644a78a495d811e852147a320f17bc1871912ca0d94c0240402e0ac15618dcc12d7eddeab88b3d9cd415dc2994a6e6130ff610cbd0aed60832084b8f44ee5decb908a8d4e37f4af7d4b1107486e3b305802bbfddf229f312bd3e05a3bac18a41e8842cfc8fae3280425fa5b6fc191412d334bc87abe366a7b6914f677ad1c54cc2588a6fa38c97059c320bcfaf7cf3bed4b19efb51d5650157051d83e3419dd2988ef18fb87a88ceb0cd4bef30ad67ca003e9489cf233ee288f51028f24143638627af08d6e74f19b362efd5b32ccc9f5eec7063af442f0abdedb0db6f194e912c2b80b348c77ab3952d4e66e2ded47381e5094a22622a9be547c6ee1e3de4a6876a42fc508e3449df2d9df9c3a9f9596236c9611588f155d0fd18bd8e95a7cfa8c71a0e86a8d1c377121dab75d575286d354162280bed1eb55ef6c45ad70c7f290e887a9dd5c8809b2183e03853bff164c886bfc937bc866723e73aae93c9ae2fa57a19bc2b9ae408fc7143b14cf553cb2ead9309244f2f6e6fd051150681b189b006c973542ded4f2b94606d37e22afb34e96b6195a07f11c16d556e02ebcaecb054e9cbe85c8c272b51fef808d7032ab01c83a3b20305641c8436cb5a779cde72dd4f0801a7b424cb9165632b0f570c207c5bd09d14cc8e5933075ae63d776649f8c63f63a3ab9ec7c444389bfd6015fc81512596bf042a7413a02a11565a7d8d07efbf3f7b7762143de7baa3a5cda45afd4ce2cc2799e7b47f0997c3f3be65602968edb03225d02cfc5bb8a90eb51092f541da50f6670e3db6d28742221e57e6554ef2eb78529a11b2e5d8412ab6e039e573b3cdd4bac1997215e6ad2c233cdd6d1b98db200e9be155f7526aac3b405c465366be6cda1312bdc75c8d0e23d1a819651f47c024454b9865f7fb1a91a79a7bd7774a5c5ff69abbd94eca249c33a308cceaac8d74302135f43921076bf5ac8e4713bffb1aca2ccf0cbf824ac08756acab32d53246640ad3814fdf6c4ad19bfa89336ea85e4674330c372878d1b0979020e768a3b0fe9929e3834da4122805454a9ca464fbb1bc4aa786d66e96ee068b3acbae6470d27564444e91db56981117d713fe21046d723d2f28fe072bf45463d43431e5dafcd68a3236646251abd6c3d9ac1cbaef1380086b74063b3be190463d0855048c945ca398b05bb6a304613178b01d865d9961ffd122bde8b22123363602e717b4e75e9236bfe0068f5a053e83a48931f10bb39fe48cfa3a55035a6accfc3882e3ed30be339dd1b67b58130b42710c6676823b0ff33c047b439f301519ad3fcaf8807a7bf32d0ebb8864b963d204a732f498185ce48803d0371170c64a72aea403163c708058b4d516ef35eab6d08104a1b5345be888d190f6fad7646edd605cf88adbd4a0431a5373069a02f2b588e7b4726cef97e56e1791c27dee1032f9318c2702ba43b05ed998470a8a2eeccfb3c98c56ac2f9ec52db9c975611fd8bbb346cffed8a05b3856134c71af347248fe74342fdde41874dbc99ba39c033c50c859b7d7c541067267513762e26cd4c8592f00a8fccdaa06b533310c51f0b72b94e872d749ba74c78a8c0c1e7018032981fe6866682af9b29e6cef836d2b33d6af011d080f578e9bb04ae8f99c451df39f9021a3034575bfef0e61ae61fd2de95e01883421e83567ba5c7d85a3c8e781f98b92f38f61a05a31f866d2d5fbad25b5cdd6ed0fae4f353f109457c42c09de88b815d304cc0e66d7a6bf099a09fd91a54aed4e9a53e4a262389176afdbb83abf529345b5236a67b686160f67ed9e43fd18d6a86129b9edd90d3e50c402d02d13fcb8f60e79c5fa1e61eef3b6bc031f1517d360d8fb0e0b0ffe55c3ff948d8119faba020b0fc8d40a06aadd91979c15f8fc0d5d136031bd8604cee0ed39a7a14b7915027e4c1774095558c29dae1a38382ba464ec4a5f855d4d4449e364efd82f015aaf0772b97bf37ee070f3a44ae9037dd4f3999f8e5b044a42b35c1a47edc5c3822673835dc9d791db2e37a49b217f33ecc43cb4a02c63f46f9226111ab347f863880543a51d19db7fb3bba6b0fe35e1ea24294e41a6e98cfda4557985de16c18175d29ca9898b436bfe24c1648bc276e8d307a19dc4e130b9ca4b0c1664072785fc42d6575fe50168a68f5c1a833340cd0e39e23126f01b407ae16b94d1379530338cea2c8a24ea7e049b37b0743029382977662d9a110e96d9a9873d07c0cb4c2f4860cc9f010ad6b931ddf5e979a3d58ea34e291c4710a0accf4720", 0x1000}, {&(0x7f0000005e00)="69fdf5f8ce494f4981bdf12032d92d727bd0452eaaf10d5060e2f0897dcd02c48251948b108c3f27c3a569bc1fa21eff00324f63aa0f8f3fef90a465ec485d37adb2d7b2136a259feddfb6996a10477d9b48677af5c41a0ef4be9a0b6cf55180dce892e6bb555f9500c083", 0x6b}], 0x2, &(0x7f0000005f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r12}}}], 0x20, 0x2004c084}], 0x9, 0xc001) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r13, &(0x7f0000000080)=""/238, 0xee) 14:31:33 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcf01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:33 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2e00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7b79000000000000) 14:31:33 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7c86000000000000) 14:31:33 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2f00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7d79000000000000) 14:31:34 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) io_uring_enter(r0, 0x7980, 0xd899, 0x2, &(0x7f0000000240)={[0x6]}, 0x8) 14:31:34 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7e86000000000000) [ 2590.338326][T25733] cgroup: Unknown subsys name 'perf_event' [ 2590.344918][T25733] cgroup: Unknown subsys name 'net_cls' 14:31:36 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3100, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x7f79000000000000) 14:31:36 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:36 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = inotify_init1(0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r4, 0x304}, {r3}], 0x2, 0x0) io_uring_enter(r4, 0x4b4b, 0x67d4, 0x2, &(0x7f0000000180), 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:36 executing program 0: r0 = syz_io_uring_setup(0x262a, &(0x7f0000000440)={0x0, 0xfffffffe, 0x0, 0x0, 0x200000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000180)=0x2, r3, &(0x7f00000001c0)=0x5, 0xf5, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x801) splice(r6, &(0x7f0000000240)=0xfffffffffffffff8, r7, &(0x7f00000002c0)=0xfff, 0x1, 0x4) 14:31:36 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:36 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8179000000000000) 14:31:36 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3200, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8379000000000000) 14:31:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8479000000000000) 14:31:36 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3300, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8579000000000000) 14:31:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8679000000000000) 14:31:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:37 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3400, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8779000000000000) 14:31:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0xe59, &(0x7f0000000340)={0x0, 0xf698, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = inotify_init1(0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r8, 0x304}, {r7}], 0x2, 0x0) io_uring_enter(r8, 0x115f, 0x736d, 0x3, &(0x7f0000000280)={[0x8]}, 0x8) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r6, 0x0) io_uring_enter(r3, 0x1c92, 0xd08c, 0x2, &(0x7f0000000240)={[0x8]}, 0x8) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000080)=""/238, 0xee) [ 2593.404857][T26573] cgroup: Unknown subsys name 'perf_event' [ 2593.411007][T26573] cgroup: Unknown subsys name 'net_cls' 14:31:38 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:38 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x59}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8879000000000000) 14:31:38 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3500, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xffffffff) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x2, 0x4, 0x4, 0x2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x5}, 0x80, 0x7800, 0x91, 0xfffffffd}}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b2a6ed2b4323c50ff7be27ae86dd", 0x36, 0x0, &(0x7f0000000640)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b2a6ed2b4323c50ff7be27ae86dd", 0x36, 0x0, &(0x7f0000000640)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x21c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5abe80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3107}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x21c}}, 0x4) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:39 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xdb02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8979000000000000) 14:31:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3600, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:39 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) 14:31:39 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2594.782720][T27151] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2594.852025][T27177] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2594.869158][T27193] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:39 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0xa48d53069700c968, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000001c0)) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3700, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8a79000000000000) 14:31:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) 14:31:39 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x2}, 0x1905) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) 14:31:40 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe701, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8b79000000000000) [ 2595.584983][T27457] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8c79000000000000) 14:31:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) 14:31:40 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3800, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2595.638307][T27496] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2595.670930][T27516] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:40 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0xa, 0x88, 0x100000001, 0x7, 0xc, 0x0, {0x2}}, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x7, 0x746, 0xa, @remote, @remote, 0x7, 0x20, 0x8, 0x1}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x10062, &(0x7f0000000300)={0x11, 0x3, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8d79000000000000) 14:31:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) 14:31:40 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:40 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3900, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) socket(0x1, 0x4, 0x9) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_io_uring_complete(0x0) epoll_pwait(r5, &(0x7f0000000180)=[{}], 0x1, 0x190000, &(0x7f00000001c0)={[0x5]}, 0x8) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:40 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) 14:31:40 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8e79000000000000) 14:31:40 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3a00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:40 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8f79000000000000) 14:31:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x8979000000000000) 14:31:41 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xea00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:41 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3b00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000180)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="03a54334c67ccb3f9ff144335a7511fffb77022065d0b714b5028b150c7be370f7f714a8199b2d6f0f17632f379d6366e1688ce5a3", 0x35}, {&(0x7f0000000280)="2da39b30fdac6e306cb1d9267aa6c4e2a6762c1fb9a299ef966f6a50dfab9154c29a7b0dfabdf317e8982d224d660fcaf94abeac54dfb8d7a91d17e485b44ca16a90d0625c64bdc04f8809c9b23f9e92d13ea47140b8007850d077dbd9d136fe8e408a46e3f5ddb44df3eb941435e7ab3e", 0x71}, {&(0x7f0000000300)="ae35b26afe216ac91a094eb65413dc2ccf4f0b15dc9e59e6f1776e88d7b99a2833f5466d1d5b06e738241e448054fdbd30092290aedfd8465ec59bfe83b57bb5f32278552fa6472bad07ff72b0d6ec072abd", 0x52}, {&(0x7f00000004c0)="b30a071040b20945e599351570d514588cbe3c2d19e2bf227d3d6ae18b0024cf5ae8093815f350823efc34bcb2f8bc632c1ccdf6f21bae26fca795685f7251ae7424e23fe1680f79a91b9ac1e9576d4b0309b50f73baa8b844aafa432c30ee019bef980fffcdef671605eeef0771a603e5904b5d67dd6d08c9e98f546a89b564d424bf87dda060e9f34dc3df415894b71239943653b3a42d49796991da44f2039359c0608c38022c04c929920fdbe448ff08737d29267ac64c20cacad759872ae7f4ee54d90babe1dd3b3985e5522bbaf3f64ace8be6091582f2d3139fd079e64430b4b73c434d8c89b90b661f7dd8", 0xef}, {&(0x7f0000000380)="ef8fc766d6cd31570fadfedd3d4df3c7beb61e515d8659f24d1a92996fadf6c51ff28eb6f2cb04c53eede96e4a0f7c060e95afdac9f59bc746a0f02dae175e023179a801fe4e", 0x46}], 0x5, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x25}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x60}, 0x881) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x9187000000000000) 14:31:41 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xeb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:41 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1200, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:41 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="8b4446d43cb28feb78c4f41c417f491e09dec27482eda140eedce035c2a7272f0b8b36da49aa5e2ba9b44f9060faa9afd86e6910a8f4f32b619c0f07bcbdf4bb63713235b6f915e370cfedfe87f4b397f1a37a8e9c6860ebd5c62155fbc2f3", 0x5f}, {&(0x7f00000004c0)="462800a035aa111380b027e102306d69538c0d5a7f35c123af83d34f7e7e27895962c2f82d404d2d17c00c076be995358d9e14bba10af46eb45abaebaf219e0e5fa1e979d138253d2a74e211cb5abf6035b0a1be8adea58bb177438729ad43320ddf", 0x62}], 0x2, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x60, 0x4040005}, {&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000900)="263bca95b548", 0x6}, {&(0x7f0000000980)="47ec4713dcf88a83a9d466e68ad50603bafe39f9fdfb8ac98c993bca813878f7e29a", 0x22}, {&(0x7f00000009c0)="b9e6e4238eb2195d69d9d0a1cc294f5d431e7b3fa9914dcf23ae188ea510beecc6c06bfae66962fef20f4396e7d03dca9392e00383bac92f2c3e2bf6b033ab79b5ef7d7b6a3a5423deca373677321f4ec98c3270c3007d3097258f7413a90ce6c8db3c8d8da19c4e5071f4743a2855e388a59fdc8b4dad6c7f92cfa8c6f086317610f1fd93cbf723f3807722983a03b7fd4854e262c6966cb600d82a1308c282ff50a0c3130fe08aa6762b35c3dba250565d7f", 0xb3}, {&(0x7f0000000a80)="a3ddfe4a0b9941ef8b74f8a9fe047e7818300cfa078a55b37f785a71cfbc0e0d5051543996cdbd4c266f1147c5b0846a47bd2237312002e281661734b06982d0bfd526b4ab3de010cfd81faf258f90ce1b1eeeca097089381f1b2aa7e2ee3f7a11f0d6de2b823510d09e56a0fc4ab42e1ccfe7ed26f1eb9d6750bbe595ea6c13bb0d68c63b35c8851cbbbc976b83c8949938ebdf30169c00a871bcf8da68c2efc9526ff97d2b46af51e9bbb98133", 0xae}, {&(0x7f0000000b40)="d71c931b98eea05ed7502a590f34e29302ef93d3bc3fb0beb4ce9b4c", 0x1c}, {&(0x7f0000000b80)="26fe42a15d1be4ea4ab5cab77753f0aa0145c6468a01c0ebadafce2a4ea4506261e035b800355dbf2d218323c9", 0x2d}, {&(0x7f0000000bc0)="611bf00b1354a7979cbbc09b6c26c627c391fe9533babdac4e883993ffd4f447b37c053c7e2f5138c247ce6d460869abf519fee97cc4c6e24732201e1d4380b91b3d6779946ef7fba91305e1ff9cb2a64b0e1b8945ff2c95d73dfbc857e03d7d5c9ec1af1dbcfb0dd749f579b126dbbcd8a9eaf01bdeb33bb95fa57cdcc6df6976667f0a341339fe7960db3f8f6950539e91136b80396ec282", 0x99}], 0x7, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000754100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40050}, {&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001040)="8c10f0c875f4ce5fd085e0eacbb2099ca74f7070870b471602499838b064f9e02a1bc141c77611786fd066c23286c0bebbeb9838c2329b2d3dc15a3f84499110b9ad441ec80772c40321be366387272ca7eb8def810bbb438e51d15f4d9e1158d699965117d480df396f98aabb4eb57dd092ec0da4d3dc04d9f26a20dbe7c8c09ef1ab5e2dccb9d6a464a03799e14a001e4e2a3d0dad3de1e3c82eef9028388ec3b2bc87ad493ad7fa7757c5a96ac1765bd7338f410bd3576a00343c2b4ada70ed950f29f5fff067", 0xc8}, {&(0x7f0000001140)="dacda9918de45609713b9726a9bc5ef82b0b3e29d08438fbb197179a7c1d123ffd8b84570cd675fca7e56514630227bfdad8a57c96c346e64b26fff2ba1a1037846966ac332fc0122e3ff6a73f3e140e171f04b5965e26f32a13c62360b1b9e75e85f62d07df4aa5048806", 0x6b}, {&(0x7f00000011c0)="0ea108a478848176962f45cfe595c3c2218d85b32fd9d7614109904e073420367387b927a155de35ea670f1b1308d46a41e95f7edf01f0a65782f3f05549", 0x3e}, {&(0x7f0000001200)="12e3160924a561457fa35f2f7d1fb7cb450f1ade0e7c5c9b55321e3d3e93edb0b2da0f7c2e3648ee36eef3d2ff2f021cf6cda614c3c32d6c7527bf002e832d67a02f792bf7185b4045c5827775cfa01d0065762dda", 0x55}, {&(0x7f0000001280)="d635afd0064f0577cea7c3af6ced93a264058f43019785c528d76a596bb490cc550d34858178eebbd03b6ef7bf8e007e4e39bedcc1764de4d93a5d27c1c02696c5ba023b21daffe1aaa3bbdb965d339bdf0d8aa672e687fb4bf6ef63de0e7729074c7e8f8b294f2197da579c49c5c3417ac7dd3c139881fc9c1f4c3a6e5c2397e3f18736642be648c629b63bf765e7510a7f841c6705a6165d536c313efc2ea55aee1a622a0b1d037a9ac478c02c0b67994a6a01ceb99f2018456ad7c8df90fa7e42d5fa5cbbe1110bca59abeec829a1ba1d39900242b4abe6166136a8d521d5dd", 0xe1}, {&(0x7f0000001380)="158d80d37b436cb76c995cc4be8dfc40df68f3c5115b7d2ea8c7aa484dea995f7b4ec10b3ddc4c3fee79b72a3f040168a7aab4a5ae67880eaf8a3cbedf72b2cd24e560b4b5b800a3e72f674c5402576f5d7cef458179a6306e1a66340d8f4491342b76822005853898af5536c0bbb9f3a3f6c66bbb774d4c697ab43d0d1aa5b14f2e457f2657341933624773da9e63180ca93b8e1e225faea8203bc0e8602df1a015c040d675c4c9d131a309e209", 0xae}, {&(0x7f0000001440)="7e3b1ecc2f90636e2726fa8049762b5ca619b52e7c5721c79d2322d06db53ec3dbc40562ff90f17fa076b06c2251fdbc0dc84129bdbeee583e76bf404e276bbe1edd6f97bef932835009333208256eb138b53c650eb8b715debf89e5f9cb038280cf6933f9236ea813f1dfb8aee2460f99bd05a92865a2d30a0d2aebac19167e321a071a57ba5bbb4b140d5c5e4140fb945b677fbee4b644f87972add344b2fc260157815ccdc367159cdd74140385f28ae38f74faa49d48ca5bacfa9007b961d44977e797335ffe17902c6b6f8cc042a96d94127f27b93afc1d18429c5da649d5f46d5791b0a0cec32e9c810f24e591fa", 0xf1}], 0x7, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x20, 0x40000}], 0x3, 0x40000) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a, 0x8032, r0, 0x8000000) r6 = inotify_init1(0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) r8 = syz_io_uring_setup(0x75cf, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) r12 = inotify_init1(0x0) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r13, 0x304}, {r12}], 0x2, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x5, 0x7, {0x0, r7}, 0xffffffff, 0x2, 0x0, {0x0, r11, r12}}, 0xfffffffb) 14:31:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x9386000000000000) 14:31:41 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:41 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3c00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:42 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x9975000000000000) 14:31:42 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x2000016e) 14:31:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3d00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fstatfs(r0, &(0x7f0000000180)=""/85) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:42 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3e00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x9b87000000000000) 14:31:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xa527010000000000) 14:31:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3f00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:43 executing program 4 (fault-call:7 fault-nth:0): r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xac27010000000000) 14:31:43 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x75cf, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2000, @fd_index=0x4, 0x8, &(0x7f0000001b00)=[{&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/140, 0x8c}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000001a80)=""/86, 0x56}], 0x8, 0x15, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) r9 = inotify_init1(0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r10, 0x304}, {r9}], 0x2, 0x0) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/16, 0x10}], 0x4, &(0x7f0000000500)=""/52, 0x34}, 0x101) r11 = inotify_init1(0x0) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r12, 0x304}, {r11}], 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r10, 0x4, &(0x7f0000000180)=r12, 0x1) [ 2598.636691][T29457] FAULT_INJECTION: forcing a failure. [ 2598.636691][T29457] name failslab, interval 1, probability 0, space 0, times 0 [ 2598.649344][T29457] CPU: 0 PID: 29457 Comm: syz-executor.4 Tainted: G W 5.12.0-syzkaller #0 [ 2598.659145][T29457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2598.669264][T29457] Call Trace: [ 2598.672562][T29457] dump_stack+0x137/0x19d [ 2598.676894][T29457] should_fail+0x23c/0x250 [ 2598.681365][T29457] __should_failslab+0x81/0x90 14:31:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xb027010000000000) [ 2598.686167][T29457] should_failslab+0x5/0x20 [ 2598.690676][T29457] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2598.696378][T29457] ? create_io_worker+0x6c/0x3c0 [ 2598.701317][T29457] ? snd_seq_info_dump_subscribers+0x2a0/0x2a0 [ 2598.707512][T29457] create_io_worker+0x6c/0x3c0 [ 2598.712270][T29457] ? __fget_light+0x21b/0x260 [ 2598.716955][T29457] create_worker_cb+0x44/0x60 [ 2598.721672][T29457] task_work_run+0xae/0x130 [ 2598.726177][T29457] exit_to_user_mode_prepare+0xf8/0x190 [ 2598.731734][T29457] syscall_exit_to_user_mode+0x20/0x40 14:31:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xb081060000000000) [ 2598.737250][T29457] do_syscall_64+0x56/0x90 [ 2598.741677][T29457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2598.747577][T29457] RIP: 0033:0x4665f9 [ 2598.751466][T29457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.771076][T29457] RSP: 002b:00007f3c56fc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2598.779490][T29457] RAX: fffffffffffffe00 RBX: 000000000056bf60 RCX: 00000000004665f9 14:31:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xb182060000000000) [ 2598.787464][T29457] RDX: 00000000000000ee RSI: 0000000020000080 RDI: 0000000000000006 [ 2598.795514][T29457] RBP: 00007f3c56fc11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.803521][T29457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2598.811489][T29457] R13: 00007ffd8bbf640f R14: 00007f3c56fc1300 R15: 0000000000022000 14:31:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xb687000000000000) [ 2599.744285][T29715] cgroup: Unknown subsys name 'perf_event' [ 2599.750237][T29715] cgroup: Unknown subsys name 'net_cls' 14:31:45 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000300)="b285611a3d06a5362b9f0608cd9bd83a9b57bfcbbc6870d66df9a874ebe50fb1770074af6989a78aaba1f06ce8fc7049f72091791ec473cf686f766a49395dc2eed99e57095b42b7e98c6199db2a7935db5ce034a42a609a00d8a3a63c511a3d73061bf2e7b10fc175592901591470147b4d8d", 0x73, 0x48090, 0x1}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) r6 = inotify_init1(0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\a\x00\x00', @ANYRES16=r8, @ANYBLOB="00032bbd7000ffdbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x76c}, 0x1, 0x0, 0x0, 0xc4}, 0x8040) 14:31:45 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xb878000000000000) 14:31:45 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:45 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r6 = inotify_init1(0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r7, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000002840)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/171, 0xab}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f00000005c0)=""/60, 0x3c}], 0xa, &(0x7f0000002900)=""/97, 0x61}, 0x0, 0x2003, 0x1, {0x1}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:45 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xbd27010000000000) 14:31:45 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfb01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:45 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x4800, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:45 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xc027010000000000) 14:31:45 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2601.230118][T30357] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2601.288151][T30409] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x96c9, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xc187000000000000) 14:31:46 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:46 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x1b) 14:31:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = inotify_init1(0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r4, 0x304}, {r3}], 0x2, 0x0) io_uring_enter(r4, 0x5691, 0xd5c9, 0x1, &(0x7f0000000180)={[0x3da]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xcf86000000000000) 14:31:46 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:46 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x2000016e) [ 2601.930901][T30813] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2602.445564][T31544] cgroup: Unknown subsys name 'perf_event' [ 2602.451576][T31544] cgroup: Unknown subsys name 'net_cls' 14:31:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x4c00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xd887000000000000) 14:31:48 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1b3ae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x4000)=nil, 0x4000, 0x8, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd_index=0x6, 0x40, &(0x7f0000000180)=""/56, 0x38, 0x0, 0x1}, 0x7ff) shutdown(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x84}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = inotify_init1(0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) stat(&(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = eventfd(0x1) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r4, &(0x7f0000005f80)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000240)="a248965c1c623c403c4432f2f7def1b1d9ce952fe840c634876b2684504e946df928ed5f967b3d513ab3a3757954adab14d3551a99a72e86cd8fad15f129bebb2f32db478627653e90737e1cb41fbaf28a9537c25e6cbb2a4726cffe2978883d105c014f8702c1018fdc7f97439bcad6b868d7e58f275b19296bf3da2ac87c4cec5e385847758c784b965cd15c9ad32c168e42e3425ba93b5b2de22ce9c1565eba830d186466eb2288b927ba4fe2b1e5f8f8ec3ab04b57bc0430c7d1fe9a1525908de956ce49e7a204", 0xc9}, {&(0x7f0000000340)="18fadb2f67ce9c95f8eee16966eff1fd3d15967c40ee2ca8ad317e691aae13a5972a73f98453fdd3a40783b0965cdf81e80748c811ccc2b86c20ca3413e1af24389ba57507", 0x45}, {&(0x7f00000004c0)="87bb68450ed71d6d8d4f9ebd6e423e6c9de2e93a206d7ad8fb50c243d783cf770a376baa3a3623ed6d9ae527c9d8462483091e98d007ec7003cbc816c58b7592311289fe1abaedb3f811ffef96b4f6d2c23610626798410d7130937a24c16bc3c5e12bc35aa44d94139128a1712eee4716ab4feb2d9e0bc6f654ff715babe38ff3dd03d014fa8ff89c8d6b1514856c0f4eceaf99ec001a772e5f8e386f4f3226bd679d799e688a55ed0a4024e826400b767f4f55c5c55e254b87b91c7e3badbcdc40bb2571b5133468485cb81e", 0xcd}, {&(0x7f00000003c0)="c56f6c8cc9bff9483b745d721233e8386be8ef89a66bfbe37d372d6729eefc6e00c7ea324a5b51c43113da32659418ddd8c1159596d42883f1b0407efb094da0c63aee9ce35262b1fe792d3905a6c3510b954e6c291d8b5d35c2821fcf51f5e17b349a8b34cf8e5661cec4238b38f00aece2fc", 0x73}, {&(0x7f0000000680)="8d02b35d946a5e5be792f56e53c5434dace491e9c3d9bd2ce3de13896b98cd8d1c915b069e8ca21121023e02336676fe19c7e8c03c3d74c74987ef44321d7adbb3fcf0b5102fa436f369b7581c944392164317577ff5aa4c47cb7b0af8f7c0bcff43efb69c9f94709fba287f692d561d00cef1b7e0f98cc00bd033d29979c1b99f", 0x81}], 0x5, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x48880}, {&(0x7f0000000780)=@file={0x1}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000000800)="afed0773c1518b975e4b782aef63b26470dbebb6ae3f89bdffa25b84483e09c555c27980e01849b6cd232ce9d12192031a25ed43031d83e04d51", 0x3a}, {&(0x7f0000000840)="fff2b6d3f67a2a4eb63ebdfac4bb8e1fd50ce7066909383e580386aca3f77db5b5bfa6f9505c7afb9123e3a01f558a0338bbbfe8f4647910f39133b50f", 0x3d}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="2c4f2f5732ca8cc01860de828b5ae8eeaee2dd95e5794a6636731ba28827b4d1fe69f18aa8e24dd3310a2b206086f6f4761d589670ebcf2e47925d", 0x3b}, {&(0x7f00000028c0)="fea069d44376c00cc944b49b9cf9063d555b5fb8ae298d4e795078b2639dec28240fc7b0ebc5a58b960138500b458a808e6d167290e6bd29a894afd17cf3f1fdeef538cb1be1ca89b4dcb3e545f3e9e95130a30676cb3890425b2e4cf2b894eafa00b4ffb4273130a7d44aebdbc20c8db85cdb01c14799e840c51eb2c58e45ec1ca528d5871a3cc3455f8a95ebd46f64f23aafaf72b05b537ac8e585c3e1971ac586ae14fcb47a87c42a00c29a2d4ef018a297b864f29839ad2a0bb78d85ab38f7206c0af4712daa1824d4", 0xcb}, {&(0x7f00000029c0)="249b5954533e545c83f784ee68445602aafdb3cd8d4c21115087903eecd4cee3f8c0cd585f404efc7308d105673dfd881e69e4f479ddc9e4fff2d15b7efdd72ca43c9bbeb116aa50fb94f612ed95092042b2ceafb78119fb4b55d34d1e0776ddda", 0x61}, {&(0x7f0000002a40)="5aebf235e68e714e5ac0ab6151616b37358eca05d25398dd71a3a8c98e0a88bdb4fdefa109484277abb31dd0fe598f7bc0c18a32cc89f5d2c55828bdec8449096e8a49440485ad6f746d48cb7c3a84c05513137313aab1adc675093e3e0b2f86bfa11d75ae708f93c152a30a7220e23c19f89ffcaa", 0x75}], 0x8, &(0x7f0000002b40)=[@rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r4]}}], 0x20, 0x80040}, {&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c00)="c7177d74c5e24ea60f4f03ef4ba449a999569f99f626f8b3504f41d3719ad8e840d38757117ff4dd7383c9c518f07f701feab9b32d5b482cc156933e993d93d10e6a82784832bb479f40e4eb25cd79a60924455014e84d5fa23e5d1f1d5cdf8ff2b8008275e8a0d3e674ff72626cbb5dea9f50df7521f6d6800d5643338b13b0b5922c50beacfb0a66165dfade98a7eac76ac64ec168a7e7416ff9fc5dec9a96237cbbd10ce6510f13ce93f0e8ecb8b4ff98dc1d413258e49091c8083398e4b14488e1020f140c4ed39d197b8a6e241ba1faca581c93d5ae1c424b16fb6d842fdff3a104", 0xe4}], 0x1, &(0x7f0000004000)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r3, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x58, 0x4}, {&(0x7f0000004080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004100)="264717967e8213bb51dbf4cde7d13f524a8b4f01b4af887307079c56b942b9517cb0d1503b69ce575c1e2566ef6c7b2c71f58410e873198fa0f71ca255a54fe1423e254fd559b120152d05db6c283062f9516734ed460961e34d84443802019613208030dc1d4be8203ca259963391ed4f2fe197b50e7496c8cbf39c16ecfac9f1eff45df8e05082af44004c378ce51f1a76c4b8e2141a72cfb16fdb597bc187a3d6378d77f747c1319616a583b2408a25ad8607a1b138", 0xb7}], 0x1, 0x0, 0x0, 0x200000c1}, {&(0x7f0000004200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004280)="9a3202b9049a546bd3ccf54d381299094f87cf78d6096924d435b4ef3335d4d91b9505ec0409b63ccd280ce27cd22ba2bb6334e3f35aea5f3c17fabd91fa1753737b38dad5bc9111c50980dde87140a9ab95f5ade4faf7975fd46cfc3312cc4d695f0ed1ca78ae58517eebc06dbaedf4589230bfe0359a4cdb2130bdf59354a4b471daa1225d321223765b5ea8eb66d334e2b5c7011df60caa47b9c547138424f6653f2dc3d352af38260e26fe95e4896b60a6fb6204ca0d0dc526b64061f2f37afd51799c6e45cdcb02f092e0f57d64424d946ded0cc9e18c5b00af3f92a86602e41d9e20e66522a47f", 0xea}, {&(0x7f0000004380)}, {&(0x7f00000043c0)="4335d9f79733c9e1d95c45535e9d0e34b166a1fb9b82d8d675e5033f1444ed0217dac638ab8083fdfe2d9779a5ff4409aa0cf514d39c0aa7d9f0f45a99612680877d5f8b2c37e84b2ae81701a55f0cdfa2e849", 0x53}], 0x3, &(0x7f0000004740)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x4004000}, {&(0x7f0000004840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004900)=[{&(0x7f00000048c0)="15c0a7067982f8ab32b95c46de2cf814d9894e1805dd31a1cc49c8a0ff309229aa77b4160e6f5da476ec821b", 0x2c}], 0x1, &(0x7f0000004a80)=[@rights={{0x34, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78, 0x800}, {&(0x7f0000004b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="98e5dcb95f9a8ea3b5d327d0be65d660dd94a18ad744e52e4baf6e76a5c9c8f854b2a3900d89e529f7b7fb8c8ecdfded4979e847e860f9ca4f75", 0x3a}, {&(0x7f0000005bc0)="e38b3f1c5660b5100a9f6994a3398b347c26ffbbf52aded353698f9a085a589e3ec52fb79b1b502a8ae85b75", 0x2c}, {&(0x7f0000005c00)="870a0d8b9770c8297fb467ed4602d805032810f99495b258a044bb4823b1d0fe0a10956b781e09d6fa62cedd36d912faff3aa604000852ebf6076052b41e34b8c33e76e43a90ebf03bfe57c3b59076510f1f6abc9723355454c144ec28113b2640648845483582", 0x67}, {&(0x7f0000005c80)="b39e2d577544cb2e2db7e72f870e58086f0bc782cf1ea49daeb31fca0afb849936889aa401d1ab9992c26ae56670cdb3377b5b2f839202f216847f1abdd8126cfcd301d098cfc022e64482d21c13641e4037dad59f42e0213cb61f0d1cdc5e62731eaf318177c53ef79f8ba7748b18b43a71469e4ed0c8153744402bc7e35e54102d4a3898505ff27e5c48787da8551584d0bf77356956c6e439b9fe9a29190540f19930cbfa28ace97c14d46dfde4376f70e5d3e02985d6ffbf114e5a38caa976ade5cc7b5fe7845c3c5549343f4165469974c6bb257afe00f77731048a05f9c35a97a5333d6e6b", 0xe8}], 0x5, &(0x7f0000005ec0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r10}}}, @rights={{0x24, 0x1, 0x1, [r5, r11, r12, r5, r13]}}], 0xc0, 0x8010}], 0x7, 0x4040) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:48 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0x7ffff000) 14:31:48 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xd920010000000000) [ 2603.871020][T32514] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:48 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x6800, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 2603.915481][T32534] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xe320010000000000) 14:31:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xe687000000000000) 14:31:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x6c00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xe876000000000000) 14:31:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xe877000000000000) 14:31:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0xd4fbfa5779021a9c) io_uring_enter(r5, 0x231b, 0x3eea, 0x3, &(0x7f0000000280)={[0x6]}, 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0xc009, @fd_index=0x8, 0xfffffffffffffe00, 0x219, 0x68a, 0x0, 0x1, {0x3, r6}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) io_uring_enter(r7, 0x3a28, 0x77f0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) fspick(r7, &(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x8400, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) io_uring_enter(r6, 0x61e, 0xf4ba, 0x0, &(0x7f0000000180)={[0x8]}, 0x8) 14:31:49 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x7400, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xee20010000000000) 14:31:49 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xffffffffffffffff) [ 2605.386415][ T400] cgroup: Unknown subsys name 'perf_event' [ 2605.392445][ T400] cgroup: Unknown subsys name 'net_cls' 14:31:50 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:50 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_setup(0x10ca, &(0x7f0000000180)={0x0, 0xd993, 0x20, 0x1, 0x38c, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x0, 0x0, 0x0) unshare(0x40000400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r4, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x6, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x6b8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = socket$inet6(0xa, 0x80000, 0x39baefc2) mmap(&(0x7f0000609000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r7, 0xf9ddd000) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x450}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000080)=""/238, 0xee) 14:31:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf087000000000000) 14:31:50 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x7a00, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x84f4}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:50 executing program 0: r0 = inotify_init1(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x304}, {r0}], 0x2, 0x0) r2 = syz_io_uring_setup(0x184, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xffffffffffffffaa}}, 0x0) io_uring_enter(r2, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) r7 = inotify_init1(0x0) r8 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x100) open_by_handle_at(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff000002dbe095a101000000e0dd10030000800000000044bbdcc2a805000822"], 0x420800) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r9, 0x8786}, {r7, 0xd786}], 0x2, 0xfffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r9, 0xc0a85322, &(0x7f0000000240)) [ 2606.541647][ T893] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2606.554040][ T895] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:51 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf286000000000000) 14:31:51 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x2, 0x5b}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:51 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x20000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf4ffffff00000000) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf6ffffff00000000) 14:31:51 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x8184e, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf787000000000000) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf878000000000000) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf8ff060000000000) 14:31:51 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x1) shutdown(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write(r3, &(0x7f0000000240)="86f483af99ed69daf1a1fa012606c8d74f31e1c3c47ecee04830ddf123ba314a5c144ab31309f57114e140bfa28524c698cad72a2b77c513087dd46e022a29fb71579ed57c7d283fe7ec1ca9b2027632b0d9965964d02ec9aa482265db642faa7727b50f75bddefcc529838d705f4a1a142262d41a9638627886bd5aa9ff41a9d457977866f12d87502f03a823d206edeccb9bbfe12b654f35d89ace94b6ceb48130963f346f570bb514e0282b27d38cbeffd88cbea8a9237146f1949127191815197fd3f69ba8ba9ed6dc5cca8bb5ec0b90afec74adfa09fe21e905f6bb4168e64392ef6ba21c3f8241dd340a65791c2295e7", 0xf3) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xf920010000000000) [ 2608.125607][ T1502] cgroup: Unknown subsys name 'perf_event' [ 2608.131583][ T1502] cgroup: Unknown subsys name 'net_cls' [ 2608.379243][ T1861] cgroup: Unknown subsys name 'perf_event' [ 2608.385219][ T1861] cgroup: Unknown subsys name 'net_cls' 14:31:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xfbffffff00000000) 14:31:53 executing program 0: r0 = syz_io_uring_setup(0x15f, &(0x7f0000000180)={0x0, 0x2000000, 0x1, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:53 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x605e, 0xfcc5, 0x3, &(0x7f0000000180)={[0x1]}, 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:53 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r6, 0x0, &(0x7f0000000180)="86ba4f54d2d330317defc0ecbaff40e0f372a0b350708986759aaf4cd1c51bc913569a15948173505aee552fcf92919f0b508081af74b62547a39ddb5becf98817f08c4d356d73133f379c7729483185b3a04ecbb256554769fc61a97fd83422cd1b021342566a718f0ae8e34ba94421a1", 0x71, 0x10200}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) [ 2609.534657][ T2600] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 [ 2609.547317][ T2611] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xfc87000000000000) [ 2609.617202][ T2633] ref_ctr_offset mismatch. inode: 0x361f offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x4 14:31:54 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:54 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xfeffffff00000000) 14:31:54 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xff0f000000000000) 14:31:54 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:54 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2610.424947][ T2627] ================================================================== [ 2610.433128][ T2627] BUG: KCSAN: data-race in unix_release_sock / unix_seqpacket_sendmsg [ 2610.441269][ T2627] [ 2610.443583][ T2627] write to 0xffff888100a8be30 of 4 bytes by task 2624 on cpu 0: [ 2610.451205][ T2627] unix_release_sock+0x2e9/0x6e0 [ 2610.456144][ T2627] unix_release+0x2f/0x50 [ 2610.460510][ T2627] sock_close+0x6c/0x150 [ 2610.464764][ T2627] __fput+0x25b/0x4e0 [ 2610.468723][ T2627] ____fput+0x11/0x20 14:31:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) fchdir(r6) 14:31:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xffffff7f00000000) 14:31:54 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2610.472678][ T2627] task_work_run+0xae/0x130 [ 2610.477155][ T2627] exit_to_user_mode_prepare+0x156/0x190 [ 2610.482771][ T2627] syscall_exit_to_user_mode+0x20/0x40 [ 2610.488207][ T2627] do_syscall_64+0x56/0x90 [ 2610.492605][ T2627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2610.498479][ T2627] [ 2610.500798][ T2627] read to 0xffff888100a8be30 of 4 bytes by task 2627 on cpu 1: [ 2610.508332][ T2627] unix_seqpacket_sendmsg+0x36/0x100 [ 2610.513609][ T2627] ____sys_sendmsg+0x360/0x4d0 [ 2610.518664][ T2627] __sys_sendmsg_sock+0x25/0x30 [ 2610.523508][ T2627] io_issue_sqe+0x231a/0x6750 [ 2610.528176][ T2627] __io_queue_sqe+0xe9/0x360 [ 2610.532761][ T2627] io_submit_sqe+0x18b8/0x33a0 [ 2610.537508][ T2627] io_submit_sqes+0x5bd/0xbd0 [ 2610.542170][ T2627] __se_sys_io_uring_enter+0x1e1/0xa80 [ 2610.547633][ T2627] __x64_sys_io_uring_enter+0x74/0x80 [ 2610.553009][ T2627] do_syscall_64+0x4a/0x90 [ 2610.557429][ T2627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2610.563324][ T2627] [ 2610.565632][ T2627] Reported by Kernel Concurrency Sanitizer on: 14:31:55 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='syzkaller1\x00') io_uring_enter(r0, 0x5709, 0xee85, 0x3, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:55 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2040000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:55 executing program 4: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaf9, &(0x7f0000000300)={0x0, 0x3d89, 0x20, 0x0, 0x2fb}, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_setup(0x301d, &(0x7f0000000240)={0x0, 0x593d, 0x4, 0x0, 0x7}, &(0x7f00006d3000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) shutdown(r0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x9, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000400)="9811338d35190c9ae2e1f4f65a7cc5dc84d3be96653969200227ce5238284072a0c14209fe35ef1d0073abcc52c8c518269c9360350291a301d992da701fbf1f016015587d", 0x45}, {&(0x7f0000000480)="01d093ad5abe239e6f76e30311c18724fc04b77ff56b45c6f6048d56f0f530c5b8cae4d30413fdcbc6b30ad5b58de747e5e2d00fab04223df1bbb37ff71a46f77517308157d54fdb79356a86777547c0b0458ac56de232fd6b1e9dd0fb555c9b365dbe0a86c33d7a0f6588cc6ed388450d520b12ff5eca46ad7b9ae6161168df6e31411d6d2b36e7f74fdd4d97e22f6e3d50a8998018fab40cf0d54ec5b4eaf417fd7cabc08c2e5aba1f9452d8006c041f15b22a8779a6a4aae2be3100507f801cea4f9131ebfc8e41f9bab2", 0xcc}, {&(0x7f0000000580)="dab5e4f4374cc5ee55e76cb60940a95b0a9e383de4f4e735d00116a70f49d19c61f50abfd477dbf42c5a78a17f54f339966c802796f629760994bf13", 0x3c}], 0x3, 0x2, 0x1, {0x3}}, 0x5) read(r3, &(0x7f0000000080)=""/238, 0xee) 14:31:55 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xffffffff00000000) [ 2610.571766][ T2627] CPU: 1 PID: 2627 Comm: syz-executor.1 Tainted: G W 5.12.0-syzkaller #0 [ 2610.581469][ T2627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2610.591514][ T2627] ================================================================== 14:31:55 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0xffffffffffffffff) 14:31:55 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:55 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r1, 0x10, 0x8003, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x7000000, 0x6, 0x20, 0xff}) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x2000, 0x40) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r4, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x10, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:55 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x2}, 0x1ff) shutdown(r3, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40003, 0x64) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) 14:31:56 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r4) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) r7 = inotify_init1(0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r8, 0x304}, {r7}], 0x2, 0x0) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000980)) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0x2, 0x0) r11 = eventfd(0x80000000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000240)="bba58a7e2897b333ca5b5d67e8ad2fc3b90937f60cfe8b5f8a1f82e79dc7ccbc65355c3ea7e3401bf2c24fe2d439ebbbdcc757dd", 0x34}, {&(0x7f0000000280)="567f0bc8526399fe1e4e2a", 0xb}, {&(0x7f00000002c0)="5ad44a8ee8d35579660ef7aadf132ef10e56e371fe1ddc318c2cfc2f9940d000a77478e71e2c1762d4088fe68db1dbda38631555919fb7ab6543e857793f5ecf000563fb019ad4e12ffe069959da41447042a5e54163fd27b515692733199212eb16c5cbe4803a3f69f82a2ac795809071b46f6ee946b9d18d66cc03049340ca8e9b19a11372460e739a8ff2e6035f7eb7fe225099ec6b5cffc2a44d074f116d3a5de6d0ac7e05189c195512befe3bd006f636f76105af19b59b2f", 0xbb}, {&(0x7f0000000380)="cae14b4dedc903a4846b22c96c666b7e21d78d67e1fc75a37fcdc3125e6d3131ed0681bc695b4f4805750e2716d77958bf12c17a797e6a490d3c7e382c65b01fef56f9f138ded03acbfa876b040c3af548bd9d853a99c4c06e230e1cdcab2c0faa6d267eaeee2612fe045db40089ee99195cbe501e9c58641dacf3fb21a7fca730afd0d40bcff4687b1376f1f8d56309ee4b44ae006cf92383dad8ea406f809c6c", 0xa1}, {&(0x7f00000004c0)="5fe467834132311b8e854ac9001ee6b1ba1a98", 0x13}, {&(0x7f0000000500)="1075a96a635506b14199d669e707463a54856dd2ceb30e0452e4b7312d27b5da515c5e6b7abdac6598fb32c27d252dca61c5757cd48d623177321563fa41d224", 0x40}, {&(0x7f0000000540)="8c5a8f806f092a33c62ccc50ff48c519ce7514967990126ebe150ff017323d5f3de32671a12bfdb89c8ae0808840c6bd9934eb5740f6e1550620a8419aa65a4d4b3b1f333d83a5d3015915fc7e423bc07792bceebe1a830df04692aa93f0bb27aa97b91edf70d15096f72ca81b52d1d6e6e3221ba9f88508cd710eb0c6d0191a35e62c40fd9dda43e1eb3b395797afd8e8ffda3931ba2754179847cb15129440228261c5491f8e3ce8404e9de9e8cf951f83af8d7b8792845e0243b4ce5e2e4b28c61ac9a8925e99d847b0a351489f5c371c3e303f1456ef68089fb3ac7d", 0xde}, {&(0x7f0000000680)="112c820e0ab5dfb8cb0109e4d857f6b845bb011da83ee073267a4ce3dfcaeda89666a04d473dfef9e435813c1dc9e7a622da1ff12478991d0ce69edd6515c91d62b5df2514aab382315c1e63b1c12f464043a429a04e4e5288f63c7f4ae514c4e84559929dddb1018526c0deb4fc6c0c4976ef3934ba9c3507092eb11a71f3b9185d9d390c084d1095cbfecc5c5c219329b891ac4751cec63976f96c2eb13f0817d0299d6562e058157684beede7f1948ea53f02771659ae2af877b790c4148808ee303322f20625526441528117a17a18ca1e63cf592801a9ae72ab06c57bc12f2d1db4fa35", 0xe6}, {&(0x7f0000000780)="014811835eb73ac1df7788f9b1fbf13d655c964d694659df4ced00132026e4d084b3299e761240f00077c6bc0a22d9db4fdce2cf19c67754b2edb130072348f668ad7dfe6d503771968486ff0257963a607591b2c7344bfc288c608afae281245321f263d3e797d170b93109cbdce0aae7", 0x71}, {&(0x7f0000000800)="102da903eda83d24d311cb77b6c09e45c062e9524a77d1c5b240ac43584a5f9b9388c69bc9e6f8646880c80157087777334068cdafd62e4c7bc6622086e33009bc9a05b99a59bda900ee58a6bafe3a33eb4a73f36f11207fbb68010057112a183b322cb3c1e3c3a74a18b2c42677baf2513ba745f6ad4bb630e34db7fcf7320da8c1383337aa8f3420ef1f2d51cac47dddac5fe44bd616390202f2b921c7192b9d949e6602dc14633c92e72c76bcf44625524633197ea7286838be2b9c9ac5be", 0xc0}], 0xa, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x20, 0x1, 0x1, [r6, r8, r9, r10]}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}], 0x58, 0x2000880c}], 0x1, 0x4000000) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r12, &(0x7f0000000080)=""/238, 0xee) 14:31:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x304}, {}], 0x2, 0x0) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000400), 0x4a4, 0xa4881) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002100)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000002200)=0xe8) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r12) sendmmsg$unix(r3, &(0x7f0000002a00)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="e56c5023d0ece498b2ef8794ac27fb0dff5ec8c5f5af978fff50b40c1e2f49b2dd2bcadd6727095663fd99c32a3f29bf38bf414bea4fb14897e410c2cb31e47cf2f7d6679bc37db9382475583bfcffb83e4c1f8ae2a29e1a17eb6f7e36626997536fbb6041e0c24f376153d7f98fb9ec4d100fe8e6f041a3489c1ebdcb8218c050f26dbbe299e1a6e38afb659fd954296fd8059a8312ec07feb789f802aef3360025c6ea23c667dd4e3a736230c07a216fd61a4a5bbd4b1b6e0f1ac74c4943019a5198a57572fc479846e91a33f1ed1bd26066d9e12ee9b986864469cf33525dce4d09ec2c8fdd81a5c9a113b2b35f6f8a798ad4c94cf9e8", 0xf8}, {&(0x7f0000000340)="c091525641143ea997063c18451413600a429f4cd81ce27007a2c657295fa9f414ea9d1d2bd3b828ac98f9c2", 0x2c}, {&(0x7f00000004c0)="03bfe2d4bc31fac30d9bec122c2c9354b94d43215970b7add672cd41240123101a7b4942a72b3ca33c602c09a5afb6a443132937515b5374aadd946966dc952751f84ba436f2dc61c2c773413f8c96e5dceebe0fa121cbbb425005541c788a3fecfc0a6265472e8e43155563b1db5bef7bd0b3648e3f1d86d68145449f1b61b9d71e4bdbae5f3a203a7815aa400d82f91c32933011faa28bc069db8ca848a9af09d579b2b380db50368cdcc237eb9c7fb3a024739b48257098a3bdd6161f89889cec791904ee", 0xc6}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100152caac32dcae0a9f77d80114de870000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x4004851}, {&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="1e809ecdca839b29ba762370b7eae53590c388517ecba55fd8c766f006ad040548bcf08b380469b2", 0x28}, {&(0x7f00000006c0)="3ea6f0a3037419b3322829109c177bd03068a994d345e3074c1ce8d2f036d7805b4dd09ab053b30a57af3e3d0c61a0829f0f599d984b1fe7afc5f19355d1741ac1f22ff53a7347f02d28d49d7fb0ef75b8258616dd7aac8d9295b44988cc423c2507fb92ebf4fc2b602a6ffeaad6ce3ca052c00610205999defce4d3e573b1e3ba712c6be55cfa6860d62b1b60c7a3aa08aabc5328ebc284c088f2b204b3935772e04ddd83f7657159ff6e4f292e4db46f96ad35f22044be87fd050332765d201a7a4ca515f912b0b363a566259d0312a458ab496882e538fca10f636f91f9c6f45d", 0xe2}], 0x2, 0x0, 0x0, 0x4014}, {&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000880)="27254aa733702dfd060acb82f3f6c9e38c2cf80ca560e64b16d5373a20c02bb6439cea9f9155b237f92cdf7bdee7f612af8e8ed08514e9c034b3c8243f5e5ba2da96bd213726d38c6757f354d5d4fe42d2f494a4fe2a2601a116e48a0fbad4d2585fdd3eed564c7b7a8b", 0x6a}, {&(0x7f0000000980)="69032317ff7adc34af94e4cbd44dc1f97a2647030f63d084b265876def37bb0cc040e3dff1ebf4a7affa6fd07756c16c72f3dec1318815f1ef776fb516b98fbc8538d6b2662ab00f1dcbcf26385abb8f3d1e80c1ad17ef", 0x57}], 0x2, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r0]}}], 0x60, 0xc0d1}, {&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)="b757318945874717610184b8a72f9fdb6ca07d28688b343c17771ab2f5030ab880c9cfacd550ad3344703cb5234a2b13110f85305c6c5b50d7736260b3c36b308ce2a03249ca1c53e7fec0d46cffdcffba409c91138d935935815044c4dc4ace9afff76c416a3eb63ad575517ba01d28928b8d9be51f07febdbd4cf0e8e8feb7eaa1896f29bc8d6ce0eff319fb5fc1bce21037f014af525e78623b64638779877b55049d3642a61d14ab824da75ad0c96700432d12f10d5ee05b2150ef13a4288f83", 0xc2}, {&(0x7f0000000c00)="0ef1480fb0ce06bcd58f702be38f0e1c50bb4c432b82958d9044d304c9dfe359c1933de07d3f5c30861d7ba328fc2cd2ebdead65cc9646c16b278f9f976e8a122dc9691f1bb15b2163c116901822387f71f7", 0x52}], 0x2, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20, 0x404a011}, {&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d80)="9123dca85fe37956f8ecde3373d18081b5e41ea3939f7bc72c59477dde", 0x1d}, {&(0x7f0000000dc0)="f79f9e3350a74f0a394f6896758a89182aba4a2525c09fc5726b5f34ab1a6161db7d35f2310d4ba34d47c3aa60e4362ace1a5b6a9f388960fa72ed258f7ec05e64d33ac3afd75dbdbaa1bc94b86d172a", 0x50}, {&(0x7f0000000e40)="a339e944d9ffa6695d8dc62923d5e4e9f0f15de599d2de9532d40c30f195e8498bbcc106abccd63b4ac9fcf08919652ad3057d21d3e60220b584276eb1a868faacfdabc4509c0fd7fa25bbc8ca39cdb020a83f4b0c292fef3bc2ee5fe2b6cadc3f6a03e9d84465ad89510df3f66313c0a5a8ef25f19c506bc2a904a380f3dff108e369", 0x83}, {&(0x7f0000000f00)="45cb555e86d48f02e80aff51d471e81409fcfbd8", 0x14}, {&(0x7f0000000f40)="f8e310376d2fb539f00b172f6cb02f6dff2560cefb614415d272a2bbfe57ba78e012175d1ea20873afe53883934bad65b92965587ca3f3e9a79b9bafe3b48087e40f49f53658cda3108df0b662bb8ed2f144913444c9f78f67f5829b7b25fd8b6f552ae9e76cd5527c97889d3728632b376415337e5f6eb01a408b7be97bcd4e33b1749318d1ca9d176ff017123a9dc64f13ffee3fb214d041aff891fbccb06c2f2abe8eaf3a79224a9f736500b14fbd2d157392e6bd5a379f16e2579b2efef3c84fb6ced8add90b8a736c7ef9923207d7", 0xd1}], 0x5, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100"/20, @ANYRES32, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000b1a7f69e894d0bee7a87495700"], 0x58, 0x24000010}, {&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000012c0)="408b2984c8ef216d62b070ba317c546cf961b1cec368306fdec4d66d7d62cec21a55be684c3507446807120e7dc3b8957301ebfd5ff4a82ea2f4d732582a4885a9462a47ecb696130c886fec1bd171c2fc201489bd8623498f8389efc9d247cfe334591c9e7bb805da345b287fa99d1b9a633592dd3d96989c5424ce3fd10f2ac30b775dcaf6baf826d88de9a0d1a81e2d14b8503d6918dfe38518d564968a6972b722275506", 0xa6}, {&(0x7f0000001380)="1d99aa26f3da69c149d427fab64bdb06dee607cc7cb72958ec16d2c1b8155ddbfe6f0786a4d5927b0d8a1b56b072dfc2681d577a05c5ca50ad0c479a6a6a53d5db3b5e74ca4ca36b54364413ddffe3370ce9dbb09969835eebeb1285854c455879f65a5e1bda37b87a28f0d3dbee10ac14c540fbe074e568c5121efeed26bf1e193ef8b71dd634c3cca57c9661a8992b256249ad94a60f31a2ffdec5aeaa77074fcee2bdcb97c7", 0xa7}], 0x2, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}, {&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001600)="895b8aeb364b24c283202889b867f5284063179e983e7e39aef9aed87cbb3fc06e2bb3e150ac43e1b39ab171d0bb200d63beee52fe0dc00288fd7cec30b8c9c42429b39301ca8eec09ae1afa6727c1e4be287c8271be368bad35977565391a5e4aced3679897b282f9414028782531ff230172a8f2e6e50c5249005af84aca2d95c429956739d75630caf72a0fa019a9c894deed2af1e7bcee0e3f3a342b3300df94d17e598d367527d4842ab5fdf524f0275e68db95252b1171bdbd510207dba71e66461a551555bcbb28b6", 0xcc}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, r11, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xe0, 0x404c054}, {&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f00)="ce741bb3ec906371b529eebb77703297412b87b5f7d97d52b1f033b6fab6b82f265c0f783bb2b74d741af8944791f9998d3b72f3ac1013ddf02e8cd14e79ad65046ebdfd820004c61441d09e448b8841995a836ef345e244543c0ffe15fddd1c05baeec4d6f1bb40c7cddadf8da306e45227677a1c9ceb1afb6d281bc1a3a44056bed876d8e05a286bf8f8c0f1fd0549883e353c1ce032b2a89099ca8c11daf177af8d3cb6b59cca80e1be5bf895662b028bf89ce2cb71a22e0b44e6db97fac199ae3547ba10b8267af36809d8d04df1e370c83469440deda7461cff64292568de872c9a79233d0db03d", 0xea}, {&(0x7f0000002000)="fd7f4d272871d6efcd43f4b0d4865929f947539caa60b3aadaaf9b93db6002be5e6aa4e7afe270a80be06dee5217acb80c46fac73ca9d969a9110206e74772914b6e5f8354dc57648bd6fc41b3702d0949ea3e116bbc9f00", 0x58}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="00000006f100000000000000010000ac02810000fe9ce187bf0b8eedaee5c29138f13a6235d9d7929b60a54df5eaddccbf804572b2e424563c33e430248258188c99aa9eacae85e63ade27e049faba6aaf7703f39114bbd5d45bc7e7d50e42affb0585515ac707b00e586dad5f4b57b1883bfcfbac2be03ef4a3b55a24c8df912b0e0000000000008528f127933d50d78d0d816217e79844a82b78fa78b03afcafb2fb5516cf434059d1fabb8a36df4eccf0826349ee76135b50465da0b25cb58110e1d426fd0ec891e4cd278a7895bbd93aaaa7856b7cee86abca9eda8f245fff3fd43a5b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}, {&(0x7f0000002300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002380)="645e9de9ba28590ec7f3fb8cf0634d4169da6818ab4bc21533be6f9655467f589264d30c88daeaab2d663df6139ed128143e8dc210fad3fc39eaa3aa3d1518b607925cb552f2d5795e058f73ac444058322ab05424bf847b21162e05d7fc84544072e9665cddd325b5f3a0d1908cd7fabbe66ccfba8330ad", 0x78}, {&(0x7f0000002400)="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", 0xfc}, {&(0x7f0000002500)="e48ac2051b8df58adf2a3ecdd510108523728bafbfc590f652be37335845581d6d7f16a6d588c3ad167a7d5fc82527494cc1ff19cd21d9cab2659a41c6184bd015a9aa099334a6c497d2d70481c65deaa13d94aefee675e4f63c6ea1", 0x5c}, {&(0x7f0000002580)="ffbb7326d697770933fe2fb77531", 0xe}, {&(0x7f00000025c0)="9744305d0bacf3a52d1ca3bbca3f082e0b56c1dcf92729bb7f086e55cf2ee95ba042f5d1f6261c7a4ca71a57c4283bb2a0abaf4c740e79e3dfdf06060fb76ddde0fdbd5bf5fd8d965e23c2a43774933605588f568337c4979eb16b0c329f793b6a7b592a92ca37c9ce6fdd6b55a587272ea6620f2974eecdf0f2afc7b60ac90c7be76b892315ae05063e67b1ce31c5ae6d941e8e54d66759699e544961592fc953f829942d2fcc834def2412c90ffbb4306087a365c658edaca5b10dacb64ae7", 0xc0}, {&(0x7f0000002680)="57ff07b274023a3a02daea3c564e24bd836d0e93c3300f426e677b0beca1a53582044e1b1393515607b2e7a85af49f26cc9911b3f340656f46cffe59801452124b0cab7d0df2d3d326646e3e03a7ec3e0f14ac34f67fa5c9ca42168e7872f2b585802db9177b780787ac2a85a7fb055715fa1a9b49449fa1fed8eaa9a1d818329e99c5b6f012b9299b2907666edc064c101c53c3325c16feaf1beeaed9550c43d58a99da081478587ccc8a011718142414cc9922adbee804a9963564e68924b34706772a", 0xc4}, {&(0x7f0000002780)="f9bb05f31403c26ea72abccb395912cea047ba99380bce8f11eb395db4790b1d", 0x20}, {&(0x7f00000027c0)="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", 0xfb}, {&(0x7f00000028c0)="d8bb4ecf3e635de59423fef5522a762a3ee27513e4e891944d2868164f357629f6525d12c6ec494e3a0d2264bf8223e203feaccb20285a571e86dba1fa83f8a3c169cec72e0f4cec76d8ee4cd54892d825c766bd2ae8a0f8d980db7d25ea62e4e93b13779e2c5522b5acea17b4aa6386457e", 0x72}], 0x9, 0x0, 0x0, 0x40}], 0x9, 0x4000) io_uring_enter(r0, 0x157f, 0x2c44, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r13, &(0x7f0000000080)=""/238, 0xee) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x5000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@nfc, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x62ff, &(0x7f00000002c0)={0x0, 0x8945, 0x1, 0x1, 0x2d9, 0x0, r0}, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file0\x00', 0x2, 0x410001, 0x31713}, 0x7a) r5 = inotify_init1(0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {r5}], 0x2, 0x0) io_uring_enter(r6, 0x4fb7, 0xd629, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000080)=""/238, 0xee) 14:31:56 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x40dbf000) 14:31:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000180)={0x0, 0x3938700}, 0x1, 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)) r7 = syz_open_pts(r6, 0x0) dup3(r7, r5, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "91610800067c7fc300c2780312d91e00"}) ioctl$TCXONC(r5, 0x540a, 0x3) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$TIOCSBRK(r5, 0x5427) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:56 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x6000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r1, 0x10, 0x8003, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000010c370deb2611e4cbe3338b2de3a0f7e03ad2a7ffd0e10d58ae1c8f8286cea23a4279c955e9626741b4f8821689023c32f7d8e356afea51e24412b83b0ad4417bb4c57a5a078637fff97c70eb46dc0e3f98955ce4b0a8ba233379e595d", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fddbdf250700200008000300", @ANYRES32, @ANYBLOB="0c009900d60000005d00000008000500080000000800050000000000", @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) fdatasync(r3) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00') r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r4, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x0, 0x9) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:56 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(0xffffffffffffffff, 0x10, 0x8002, 0x8020001) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fallocate(0xffffffffffffffff, 0x56, 0x6, 0x9) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r2, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x195) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 14:31:57 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x6040000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r2, 0xd481e000) write(r0, &(0x7f0000000480)="50020dc76e5afa28acc5b2a55a2c64b1951e6c1e0e8b9a4c4c718c08b0acde1c2da2f79de95481d88d786c3fe59ecca1aca9d8292273b22a8078dbcff83e057b504546c1b3c92b3aef57a68c8d9efb817f1ca59ff7fb7c6382", 0x59) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020, 0x0, 0x0, 0x2}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index, 0x1, 0x0, 0x0, 0x2, 0x1}, 0x814) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r7 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd=r7, 0x6, &(0x7f00000002c0)="9681abc0994f76302994841df65727d63f907456a0179ad55e9935d0bf027def36b4498d3d251a94818723a2606152735cfe030911ef44e10854978d2a452685b86f080791811c76c4f20fd8a77441b94a9071a1995c5f0190887dd1290d57e3f1d7f05acd1acad49bb66af0944a6b954821150747de2fbbbe0b7d1f7a06d731d960dfdb261658c7e7246d2972d0269e158d18d597be7fc0930c51cfc5c72822c39c6592a7d7efa13b2fc776711462834c9718f3abe29b180c9be532f308f4eef099e78c0ef63a40475d658738e8a0e9ddb667c0dafdef9a34ef3e4950b085082ed801352ec91bac011a072da9a82911", 0xf0, 0x6, 0x1}, 0x5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000080)=""/238, 0xee) 14:31:57 executing program 1: syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r3 = inotify_init1(0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r4, 0x304}, {r3}], 0x2, 0x0) io_uring_enter(r4, 0x3a28, 0xfffffffc, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:57 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x7000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000014, 0x8012, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x8, 0x2, &(0x7f0000000180)=""/27, 0x1b, 0x8, 0x1}, 0x8001) syz_io_uring_setup(0x2de4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000080)=""/238, 0xee) 14:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff, 0x0, @perf_bp, 0x0, 0x0, 0x800000, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0x1a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f0000617000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r1, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x8020, 0x3, 0x200000000002, 0xffff}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000480)='./file0\x00', 0x20) 14:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x7e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x341042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/224, 0xe0}], 0x1, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x5, 0xa8e6) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x400) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 2614.127783][ T4741] cgroup: Unknown subsys name 'perf_event' [ 2614.133751][ T4741] cgroup: Unknown subsys name 'net_cls' 14:31:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1f, [0x2, 0xe89db13, 0x5, 0x100000001, 0x8, 0xfff]}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020, 0x0, 0x0, 0x5}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:59 executing program 0: r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='?', 0x1, 0xfffffffffffffffd) setuid(0xee00) keyctl$setperm(0x5, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, r5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000080)=""/238, 0xee) 14:31:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x4) io_uring_enter(r4, 0x39b, 0xc705, 0x3, &(0x7f0000000180)={[0x80000001]}, 0x8) shutdown(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:59 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x20, 0x0, 0xc4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3085, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffd7d}, 0x0, 0x20004000}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = mq_open(&(0x7f00000002c0)='&\x00]\x99\x12\xf8\xa0\xd0\xd0\x0e.\xfd\xb3\xf1e\xe7\xc2\xa4\x1e\xb4z\xf1^1\x13\xa2\xcf\xb1\x87\x92A\xa0_1\x1e\xe0\xa1\xe7ef\xdcm\x9f\x030&\x13\xc3\b\x93\x96.\x87#\xb6i\xb9\xa5\xd5w\xbc\xf6\x03T\x88\xa1\xee\xf0\xcd5\xb4%\xf9*d\x04\xd3+\x80x\xc48\xeadW\n\xc4\xb9\xad@Vj/\xf8', 0x80, 0x120, &(0x7f00000001c0)={0x6, 0x0, 0x5, 0x7fffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000240)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:31:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x24) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000780)=""/252, 0xfc}], 0x7, 0x81, 0x10001) read(r4, &(0x7f0000000080)=""/238, 0xee) 14:31:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000480)={0x0, 0x80, 0x9, 0x1, 0x7, 0x3, 0x0, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f00000000c0), 0xa}, 0xc000, 0x7, 0x7f, 0x0, 0x0, 0xc1a1, 0x8, 0x0, 0xb16, 0x0, 0x7046}) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x3) fallocate(r1, 0x10, 0x8003, 0x8020001) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)=0x1) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x17010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x9000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x18030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:31:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x7d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x20) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a43eb0c48a", 0x5, 0x4) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000480)='44g\xba\x8dui\x00\x96\xf1\xcb\x90\x96:\xd2\xf5\x1d_\x92\ab\\\x98\xd12W\xce?\xd5\xd4\x13\x0fy\xf1H\xa7\xb0\xc8\xfe\xd2>\x10\xbag)&\xec\xc5B\xbc\xd5\xb6gDS|\xe0\x0f\xc9\xe3\xc2\xb4r\x98\xc2\xa0\xad\xa4\t\xdf\xe8A\xd0\xc8\xae\xf9\x7f\xaa a\xe2\xc9e\xc1H\x12\x16\xaf\xb1\x9fM\xbc\x01\xb5\x1b\xac \x8c\xc3H\xc5\r\xa18\xd4?>\x00\x00XyJ\x91\x7f\b%_\xca\xf3<\xc8\xc4\\\xcc~\xf8!zp\xd8\x1c@\x1e^e\x0e\xac\xab\xfb4d\x19p\x8e\x9f\x03\x9e\xfd\xf6|\x97\xca[\x0e\x83\t\x11\xd1\x87\xda\x8d\x11L\xe4M\xae\x05\xc7\x0e\xed\x91\xe4:^', &(0x7f00000005c0)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:31:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xa000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:31:59 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:32:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/238, 0xee) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x100010, r0, 0x8000000) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r7 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r7, 0x9, 0x0, 0x80, 0x0, 0x1}, 0x0) 14:32:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) inotify_init1(0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4042, 0x18) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x7435c0, 0x188) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:32:00 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xb000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:32:00 executing program 4: r0 = syz_io_uring_setup(0x264c0, &(0x7f0000000440)={0x0, 0x34e2, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000080)=""/238, 0xee) r6 = inotify_init1(0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x304}, {r6}], 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={{r6}, 0xffffffffffffffff, 0x3ff, 0x100}) 14:32:00 executing program 0: r0 = syz_io_uring_setup(0x18b, &(0x7f0000000440)={0x0, 0xf5d8, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x40012, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c}, 0x0, 0x0, 0x1}, 0xffee) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0), 0x1) r4 = syz_io_uring_setup(0x7fe6, &(0x7f0000000280)={0x0, 0xe4ed, 0x20, 0x1, 0x33a, 0x0, r0}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000300)) io_uring_enter(r4, 0x7a7, 0xfc13, 0x1, &(0x7f0000000340)={[0x4]}, 0x8) shutdown(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) poll(&(0x7f0000000080)=[{r6, 0x304}, {}], 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x697}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4008800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000380)={0x4, 0x598, 0x1, 'queue0\x00', 0x7ff}) read(r5, &(0x7f0000000080)=""/238, 0xee) 14:32:00 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:32:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:32:00 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x10b382) r2 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) fchdir(r0) pwritev(r2, &(0x7f00000004c0)=[{}, {&(0x7f0000000440)="813586c3c380fec40dc94a4d09e82dd7a0a184dec7457c0632b7b8579e01df2f81f750", 0x23}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187b3e3e3652f72b735f7b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dee77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d10a8188212ce07c4c", 0xa4}, {0x0}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x81805, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x24002d00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x401, 0x7}, 0x1c) r5 = dup3(r2, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x60, 0x0, 0x3b}, {0x1, 0x548, 0x0, 0x3dec, 0x764, 0x102, 0xffffffffffffff01, 0x100000001}, {0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0xc000000, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 14:32:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) 14:32:00 executing program 5: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:32:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0xffeffffffffffffd, 0x0, 0x0, 0x6, 0x4, 0xbfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x12) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) fdatasync(r4) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)="d6e9ec7fc52adfdf34b3792b4f2368802ccd7bb32a8d74921d0e670916cf7d0a4e4949bd094564d396dd36e6debb9718e7e197c2b972bfefee9321ddd244738b2d60a5ee5764b32b078b474c370f51", 0x4f}], 0x1, 0x6, 0x4040, 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='uid_map\x00', &(0x7f0000000340)="dc84ce226c43b3d6ec924cd3a8947dd9565a41f4af3d553823df84f88d719e28d38fbadb65a6ab2982c2e9203719def3bea804e428f4c2880b60b4d97ba1864e212556cd3e2cde373d205cdbf56a5d3bcdc927a772fb34f9f5dba85191b0b701815fabba93ff4ac07d9872e21e0e896c9f30a041c702d15b4989a1a26ea5880de3e4dce8487863abd712aa241d", 0x8d) fcntl$getownex(r0, 0x10, &(0x7f0000000540)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f000074c000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r5, 0xd481e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x8020}) creat(&(0x7f0000000580)='./file0\x00', 0x97) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r1, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@ethernet={0x1, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000005c0)="64db2e2230ef6acf35d364610e652f57f227453414d4fa2bd7ddf805071e97abe7f6e46d18e4c6ce203a8d50d5b9753996207f7d6b7f7225405faedb16bcd6405ae284a78aa6a429ab5f0a9209b70de32c24d9fe0321660a8440c91a2b60862e91e7a4cb09811e1ffe57b8b212390bc117a31160fb72ed06b2462a2fca34dff2a4f45e2410c3596e4ebe1e26b5e6ee33e4211cdb5c3546d0