0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:01:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:52 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:53 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:54 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5b, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aa"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:55 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:55 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:56 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:56 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x45, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x45, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:58 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x45, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x51, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad325"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:58 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:01:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x51, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad325"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) [ 316.780555][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.786887][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 14:01:59 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x51, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad325"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:01:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x57, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd799"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:00 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:00 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:01 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x57, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd799"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:01 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x57, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd799"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:01 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:02 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x0, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:02 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:02 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:03 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 5: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:03 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:04 executing program 5: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:04 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 5: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5b, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aa"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:04 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:05 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5b, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aa"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:05 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5a, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:05 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5b, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aa"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:06 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:07 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:07 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:07 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:07 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:07 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:07 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) 14:02:07 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:07 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:07 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:08 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:08 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:08 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:08 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:09 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x5a}, {&(0x7f0000000040)='S', 0x304}], 0x2) 14:02:09 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:09 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:09 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:09 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:10 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:10 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:10 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:10 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:10 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:10 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:10 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:11 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:11 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:11 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:12 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:12 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:12 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:12 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:12 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:13 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:13 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:13 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:13 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:13 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:14 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:14 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:14 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:14 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:15 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:15 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:16 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:16 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:16 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:16 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:17 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:17 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:17 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:17 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:17 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:18 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:18 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:18 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:18 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:19 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:19 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:19 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:19 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:20 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:20 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:20 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:21 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:21 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:21 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:22 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:22 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:22 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:22 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:22 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:23 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:23 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:23 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:23 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:23 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:23 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:24 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:24 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:24 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:24 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:24 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:24 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:24 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:24 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:24 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:24 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:24 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:24 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:25 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x5a}, {&(0x7f0000000040)='S', 0x304}], 0x2) 14:02:25 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:25 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:25 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:25 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:26 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:26 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) (fail_nth: 1) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:26 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:26 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:26 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) [ 344.415182][T15181] FAULT_INJECTION: forcing a failure. [ 344.415182][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 1 14:02:27 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 344.531734][T15181] CPU: 1 PID: 15181 Comm: syz-executor.5 Not tainted 5.15.0-rc4-syzkaller #0 [ 344.540547][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.550618][T15181] Call Trace: [ 344.553904][T15181] dump_stack_lvl+0xcd/0x134 [ 344.558584][T15181] should_fail.cold+0x5/0xa [ 344.563107][T15181] _copy_from_user+0x2c/0x180 [ 344.567844][T15181] io_submit_one+0x91/0x1b80 [ 344.572498][T15181] ? find_held_lock+0x2d/0x110 [ 344.577392][T15181] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 344.584168][T15181] ? __might_fault+0xd3/0x180 [ 344.588906][T15181] ? lock_downgrade+0x6e0/0x6e0 [ 344.593778][T15181] __x64_sys_io_submit+0x18c/0x330 [ 344.598896][T15181] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 344.604365][T15181] ? syscall_enter_from_user_mode+0x21/0x70 [ 344.610313][T15181] do_syscall_64+0x35/0xb0 [ 344.614791][T15181] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 344.620720][T15181] RIP: 0033:0x7ff93443b8d9 [ 344.625137][T15181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 344.644758][T15181] RSP: 002b:00007ff9319b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 344.653176][T15181] RAX: ffffffffffffffda RBX: 00007ff93453ff60 RCX: 00007ff93443b8d9 [ 344.661151][T15181] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007ff934523000 [ 344.669123][T15181] RBP: 00007ff9319b21d0 R08: 0000000000000000 R09: 0000000000000000 14:02:27 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 344.677091][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.685060][T15181] R13: 00007ff934a73b2f R14: 00007ff9319b2300 R15: 0000000000022000 14:02:27 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:27 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:27 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:28 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:28 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:28 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:28 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:28 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:29 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:29 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000002, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:29 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:29 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000004, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:29 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:29 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:30 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:30 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000010, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:30 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:30 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:30 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:30 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:30 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:30 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:31 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x2, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:31 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x4, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:31 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:31 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:31 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x10, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:31 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:32 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:32 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:32 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:32 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:32 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:32 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:32 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:32 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:32 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:32 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:33 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:33 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:33 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x2, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:33 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:33 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:33 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:33 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:33 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 14:02:33 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:33 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:33 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, 0x0}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:34 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:34 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x4, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:34 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:34 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:34 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:34 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:34 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:34 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:34 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x10, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:34 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:35 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000002}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) 14:02:35 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000004}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:35 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:35 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:35 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:35 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:36 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000010}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:36 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:36 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x2}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:36 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:36 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x4}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) 14:02:37 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x10}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:37 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) 14:02:37 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:37 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:37 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) 14:02:38 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:38 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x2000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:38 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:38 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:38 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x4000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:38 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:38 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:38 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x10000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:39 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x100000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:39 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:39 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x200000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:39 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:39 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:39 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x400000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:40 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:40 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x8000000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:41 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:41 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x2}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:41 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x4}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:41 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x10}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:41 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:42 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x1000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:42 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x2000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:42 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:42 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:42 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x4000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:43 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:43 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x10000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:43 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x100000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:43 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:43 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x200000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:44 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:44 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:44 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x400000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:44 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x1000000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:44 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:45 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x8000000000000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:45 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:46 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x2}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:46 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:46 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:46 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:46 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x4}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:46 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, 0x0, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:46 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:46 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:47 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:47 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:47 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x10}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:47 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x1000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:47 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:47 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:47 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:47 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:47 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 14:02:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:48 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x2000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:48 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:48 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:48 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) (fail_nth: 1) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:48 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x4000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:48 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) [ 365.991208][T15881] FAULT_INJECTION: forcing a failure. [ 365.991208][T15881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.039624][T15881] CPU: 0 PID: 15881 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0 [ 366.048427][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.058632][T15881] Call Trace: [ 366.061944][T15881] dump_stack_lvl+0xcd/0x134 [ 366.066565][T15881] should_fail.cold+0x5/0xa [ 366.071107][T15881] _copy_from_user+0x2c/0x180 [ 366.075816][T15881] io_submit_one+0x91/0x1b80 [ 366.080444][T15881] ? irqentry_enter+0x28/0x50 [ 366.085148][T15881] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 366.091940][T15881] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 366.098222][T15881] ? lockdep_hardirqs_on+0x79/0x100 [ 366.103452][T15881] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 366.109649][T15881] ? __x64_sys_io_submit+0x1d2/0x330 [ 366.114983][T15881] __x64_sys_io_submit+0x18c/0x330 [ 366.120124][T15881] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 366.125621][T15881] ? syscall_enter_from_user_mode+0x2b/0x70 [ 366.131558][T15881] do_syscall_64+0x35/0xb0 [ 366.136014][T15881] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 366.141936][T15881] RIP: 0033:0x7f1794b178d9 [ 366.146371][T15881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 366.166001][T15881] RSP: 002b:00007f179208e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 366.174436][T15881] RAX: ffffffffffffffda RBX: 00007f1794c1bf60 RCX: 00007f1794b178d9 [ 366.182424][T15881] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007f1794bff000 [ 366.190412][T15881] RBP: 00007f179208e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.198402][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.206388][T15881] R13: 00007f179514fb2f R14: 00007f179208e300 R15: 0000000000022000 14:02:49 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:49 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:49 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) (fail_nth: 2) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:49 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:49 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x10000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:49 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) [ 366.760995][T15900] FAULT_INJECTION: forcing a failure. [ 366.760995][T15900] name failslab, interval 1, probability 0, space 0, times 1 [ 366.840032][T15900] CPU: 0 PID: 15900 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0 [ 366.848841][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.858912][T15900] Call Trace: [ 366.862205][T15900] dump_stack_lvl+0xcd/0x134 [ 366.866824][T15900] should_fail.cold+0x5/0xa [ 366.871360][T15900] ? io_submit_one+0xfd/0x1b80 [ 366.876151][T15900] should_failslab+0x5/0x10 [ 366.880753][T15900] kmem_cache_alloc+0x5e/0x390 [ 366.885626][T15900] io_submit_one+0xfd/0x1b80 [ 366.890246][T15900] ? find_held_lock+0x2d/0x110 [ 366.895044][T15900] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 366.901836][T15900] ? __might_fault+0xd3/0x180 [ 366.906542][T15900] ? lock_downgrade+0x6e0/0x6e0 [ 366.911434][T15900] __x64_sys_io_submit+0x18c/0x330 [ 366.916576][T15900] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 366.922068][T15900] ? syscall_enter_from_user_mode+0x2b/0x70 [ 366.927990][T15900] do_syscall_64+0x35/0xb0 [ 366.932432][T15900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 366.938354][T15900] RIP: 0033:0x7f1794b178d9 [ 366.942782][T15900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 366.962408][T15900] RSP: 002b:00007f179208e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 366.970860][T15900] RAX: ffffffffffffffda RBX: 00007f1794c1bf60 RCX: 00007f1794b178d9 [ 366.978852][T15900] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007f1794bff000 14:02:49 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:49 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 366.986844][T15900] RBP: 00007f179208e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.994833][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.002824][T15900] R13: 00007f179514fb2f R14: 00007f179208e300 R15: 0000000000022000 14:02:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:49 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:49 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:50 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:50 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) (fail_nth: 3) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:50 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:50 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:50 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) [ 367.648333][T15930] FAULT_INJECTION: forcing a failure. [ 367.648333][T15930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.710394][T15930] CPU: 1 PID: 15930 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0 [ 367.719207][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.729282][T15930] Call Trace: [ 367.732575][T15930] dump_stack_lvl+0xcd/0x134 [ 367.737195][T15930] should_fail.cold+0x5/0xa [ 367.741735][T15930] _copy_to_user+0x2c/0x150 [ 367.746268][T15930] simple_read_from_buffer+0xcc/0x160 [ 367.751737][T15930] proc_fail_nth_read+0x187/0x220 14:02:50 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) r3 = socket$kcm(0x10, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r3}) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 367.756818][T15930] ? proc_fault_inject_read+0x220/0x220 [ 367.762383][T15930] ? vfs_read+0x133/0x600 [ 367.766804][T15930] ? proc_fault_inject_read+0x220/0x220 [ 367.772431][T15930] vfs_read+0x1b5/0x600 [ 367.776609][T15930] ksys_read+0x12d/0x250 [ 367.780879][T15930] ? vfs_write+0xae0/0xae0 [ 367.785414][T15930] ? syscall_enter_from_user_mode+0x2b/0x70 [ 367.791357][T15930] do_syscall_64+0x35/0xb0 [ 367.795810][T15930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 367.801719][T15930] RIP: 0033:0x7f1794aca48c [ 367.806140][T15930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 367.825771][T15930] RSP: 002b:00007f179208e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.834207][T15930] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f1794aca48c [ 367.842181][T15930] RDX: 000000000000000f RSI: 00007f179208e1e0 RDI: 0000000000000006 [ 367.850152][T15930] RBP: 00007f179208e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 367.858126][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.866094][T15930] R13: 00007f179514fb2f R14: 00007f179208e300 R15: 0000000000022000 14:02:50 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:50 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:50 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7220}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x2d, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_getroute={0xb4, 0x1a, 0x0, 0x70bd29, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x7, 0x0, 0x2, 0xfd, 0x4, 0x3300}, [@RTA_VIA={0x14, 0x12, {0x2b, "b3eb009e3fbff71debdae3fdb846"}}, @RTA_NEWDST={0x84, 0x13, [{0x200, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0x2, 0x0, 0x1}, {0x7158, 0x0, 0x1}, {0x61, 0x0, 0x1}, {0x101}, {0x2, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x4}, {}, {0xff801, 0x0, 0x1}, {0xa5b1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x200}, {0x6}, {0x3f}, {0x8}, {0x7fff}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xffff8}, {0x1f, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0x6}, {0x80, 0x0, 0x1}, {0x3}, {0x3b}, {0x16c}, {0xa6a}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008800}, 0x48000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x7, 0x96b) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x50800, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000440)) 14:02:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:51 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:51 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:51 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:51 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:51 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:51 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:51 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000002, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:51 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:52 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:52 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:52 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:52 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:52 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000007, 0x12, r0, 0xc1423000) syz_io_uring_setup(0x18a, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r5, r4, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x444002, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002740), 0x80, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r10, r9, 0x0) io_submit(r3, 0x9, &(0x7f00000029c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000640)="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", 0x1000, 0x5, 0x0, 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x7f, r0, &(0x7f0000000280)="641b345879d4f458285103aff04dd2e441d7dfbc7c910cac5852b288d7786cbbee7845713629ccdb551e9c2ca1735ee058284cb7f5db6dcc8e6084c6a1cb6fe5004b2f17411a904b3d1f9076f559a0b625c6f2218ca1bd0404de4f89a5e137ac11", 0x61, 0x1, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x401, 0xffffffffffffffff, &(0x7f0000000440)="e492d1d548a575c9eab901671434169359d8b5a5bdfbbf26e069feeee4116d7b7bc19b04fb4f1fae1e2344911855a1d3b0196c060b860a0712469d312a6a297451b7102380a20e41835871c02866f6391993022ea82bb7d50e0bae6033a2729499d71181bfa9584789be4b00be89a9f1bb83e92a543e09091f564d85e5abfd8dd0fe0b85a502b7ea55ce38ef3aa727b1fdf5554f7abd3c2a6a657240afe57a2f4a0fb065aa83a79b2c1825895516487250bc97ed6ac1c12f6b6773b21a64c3ff9081bfd8b7a9973aca7c84b3302bcde9b607fe2de6c40f1b3ce857542c7b53", 0xdf, 0xff, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000000300)="53755a93cd1d7f2e25b04452a3bd24fab61275f95789caf6b71a1d683164fdcfd20acee4233f8833af27f0bd7ae19d6c5287303764ed53476ce41778e2c4f5570bc02f06f47862fe96ec31b9eed066bbe11bde13740b447a924f3419bdd2ee649e3b3a6a521b0ae58cf54b18d7ed64e7016546", 0x73, 0x401, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, r5, &(0x7f0000001640)="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", 0x1000, 0xee, 0x0, 0x2, r6}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x8, 0x1f, r7, &(0x7f0000002680)="b42aa83b2292ffc92e124eb9792e4ef0a58dbdddeab28b265082e9761f512336e96d87813716d4346ef051dfc175daed7c2a61908bfec608470303cb89292991fa36ca3f8b32f7a66b00463048bda066071e315dce38cd642751", 0x5a, 0x8, 0x0, 0x1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x7739, r8, &(0x7f0000002780)="41f7b41a2cf5033e169f6da8d85732f7c563cd33f7a878f354a4b8e4992624a11737fa4fe6544bb3b9e915a4e1f720880bbd03a8648e374bc38302518617be842a00130656c94020e1a9ed27dcd86191422e7b1047150d1670e710df65ba0c83c0c01276801bf3", 0x67, 0x5, 0x0, 0x1}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x1, 0x1f, r2, &(0x7f0000002840)="75663aedcf55e2984615e3a4e5f6f7edb4c4ca8085d56059c9999803f5bff0ef352a0bedbbe999d23af04bfdf644904a7b6c6287", 0x34, 0x318c, 0x0, 0x2}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x2, 0x6, r10, &(0x7f00000028c0)="c166347e247022c633ff5dadc7ac70774689bb9805e848f91f8c621ee30b661c06dc308c7c47254db320b3310eea846c0b594b8a976d93bde691bbaca166419aaa2870e259a038cb992b703d7573f2012a50a0e2dea07cc611f6bc3d40293cc6cddbcdc84e86199c8e9a613ce4e444c094d5121d4e181dc89af98263e56ba750b8c897c1a66eb673d9d9516b30024ea1d737c150411a", 0x96, 0x8, 0x0, 0x2}]) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:52 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000004, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:53 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:53 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:53 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000007, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:53 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:53 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x4, 0x623748df, 0x8418}) io_setup(0x1, &(0x7f0000000240)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000637000/0x2000)=nil, 0x2000, 0x8, 0x11, 0xffffffffffffffff, 0x8000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x8000, 0x1, {0x3, r6}}, 0x101) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:53 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:53 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000010, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:53 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:53 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='bridge0\x00') ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0xfffffffd, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa30903, 0x4, '\x00', @p_u16=&(0x7f0000000040)}}) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r2, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x100000000, 0x200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:53 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:54 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:54 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000700, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:54 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f000017c000/0x4000)=nil, &(0x7f00004f6000/0x1000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x2d, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='bridge0\x00') r7 = syz_open_dev$midi(&(0x7f0000000040), 0x4, 0x420582) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='bridge0\x00') io_submit(0x0, 0x9, &(0x7f0000001a40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000280)="aba9240f7d4c3ebd317a985b7e4bdb32fcc94e9ae613c7746190bab2716a669bd43c8d41c1d3379396c819741439f8ca9efd73749a1088e4e9ece28456200fd2dd66b8faa99e00abe60e8bbcff55a32c7e00795f4863278b760b836d864daa7afd62c8d149f136bdbfac5c1f6640d8e7bb34a1c7ab97490c59bd5e138619f2f750dfa1b86b6119102468d9898f63aebbcd342776f0caa80024bb6b2455c8195ae95740a7a8d40309221363", 0xab, 0x752, 0x0, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000100)="1649815b82aa", 0x6, 0x9, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000440)="6103c00abaf073b08f3b07096ef5b5bb446db63394ebc0bde63b33b98f33c6f9ca53e2fd64aa8ec1512f7e04df49edb75b41b0de3d2ac5f66e46dabcc6a11c7f217c7998f51659ae75f153da249a75d07b22713a1cfb1aaccc3415fb958e8ce1762296406f35e878577094510946c976f2540368f3b88d41683354f4d55be34d3c137154688fcfc36e8ad06730cfe99b994f26aff1e20268a23062af4c1e33f5ade6c1bc93a709d3f5787800eb7df1077bd8b95f5bbf25d93550798d2f", 0xbd, 0xd892, 0x0, 0x0, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="b84f3ec808eb56a86e7fcac55ed3b1f82ead85d63f6af99162a6e48d1db176cd3aa0731863771b13baf7420b626d1f0bf3fdafd43184216c0e14caf0122d89e1e448d0ca876692b02bc2fce6e23c31002eb069b24522bf17dd8cd78a4764605df6b3dd428d28c87934e7d4ce610aeb0e32d9988a5b8bd0fc", 0x78, 0xd6, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x667, 0xffffffffffffffff, &(0x7f0000000640)="64e82e8031d484252f93558c21b28f6c8ca5b81d325d7aed2a7bde3980606fff6418b53e3f41b611e7dd3141d244c2499d42620211a14ec9626f2e131722e6ce7d6f6eb00626b8e2841dacd71a3a232fe5f69526a1b2bb0afebd066afff52c3613534ce53ff3fc701e1f5274788b5310d7dd63d3cdb71cfd052469625d61f3aefa3987d76cb7969eddbdef91ef43730ce91ace281e8a14970bae2635638db7c54e5d48e7b0e850fd95ec92285bab4cef5a914f3a7c749fac042d", 0xba, 0x60000000000000, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000780)="c456c7f9224f709e94", 0x9, 0x21, 0x0, 0x0, r4}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f0000000800)="5b2a81016afa9d5d1bb94899e2d05ad659e50c632e737233812842bf5970f5eba916ba2b17469aec8113b3510b65579aa2dd30a6a59522ac06e250c0c372037443e227eda8e3a3408d05692f6daf46d7186164128df628a1866857342e62a307f165ea20f2851984d43dac518c55ff188a22df965ae8c067ccfd66f0515810022685a46e16dc1efd8d5b51205cf99faf1d690e361e36c86478fde4f6d1cc6ef5afb08bf4716bbaa9721329d8b546a6a40d5d345b69101089cb5c9cb899a28f04de238f5c680d7b221a51f501ba3f900d0b158ebab318e27eacbef8536b3853", 0xdf, 0xdda1, 0x0, 0x3}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000000940)="88d3e91aca5ba81717fbbdc3324aa5ea8009458e26faa4877e986963c0024234729169d455e2b55051e47af0c9e21a292c6db9cfa678bba81153825a883aea0a937a95dd131708ad07dc246bca2c53b4ca64cfa17fb9e968184484c9b3b7a45a27d913452e631c9c1777771e8279976a3d7d95ad3d2662095035a0e8adce4496c34927915b5c1f3887a1faf05caf837ff23d493fd68afb410ec84e2747d4f422f5b353dc0df7f958219e29071bd88841f2e5afe3c8c775498e836cead38e479d0a5821bbaa32aad3a80f00685e576a26928fc74207d4176aaf91758ced21e987c08da8515c18e30cc8aa1df88beefab82210bf95f9ddd6f3918f68061be9d55cafd2943862425f476e2fbef90cc497e0cb7eda715cd63854a2620a887d002bc6f495eb46927f95362f9fad434eba0c2407b7c026b905c2d1458ba36aada49570675b95f4f82189080f96000be2b5be30793ce4d8299d59e709325d26d5c5cab1cf83ad69845014bfc1fe51e8f7272ad7dc501cd39f9e5808452d31a335c91483eb5131e7b9a37dfdab2d66478e43f1f09ca59ae754ce5f937c6ac8e8983f53c40cf8a678ac86d1d35a6f2c61b53efc96a85d0a870a6f9b014a87894afaa1f10d152f91016f1ec78ed4b0620344bc4faf6a07bf110d0243acfa2db46e7f3a7668b4ede0e79e0173c78718a0acaa24ea4effbd729e222986d8bb7935116af6a8a42b353a974b40847b00efc4c4702bfa5f270c6f4dd105d1642692bf1a621a40bafb1c74dc2c9b66465fb8f0c43c95e3aa72b38d3eb2cbd32b97ef2167a400b99b9ed27b5980da5b245befa951684f92b709e5ffa8f01697ce666c970df6c63d47046257ae33d1b471e3c7f690717baf4aba1512d46429d892582a6212ea3a5b9c69462472b554efa9edbf1dfa8550f241f1a520d860744b8f512e88ef81794d846a3183aefe5c7b6770a1d59315ecf41e29dc9a263296eee918de39e0185a992470bca338eb270cb279c2a60bc3910c2f8babddce27d22717c3749910d2885212f891991a6d2c3bca4ef51d101e03b969a5fd2db7729a42828fd640e8809f46df01529a7f961c82a877e58051eaf3379a89da18025fc08912ff6cda9753b8c904b849c819807bd97a7326fb1d72cd40d249c25f7bb0430616d8d444dee5251ca3371a04ea5795d79cd6b5e8ac559fb8dbab5e67743757cdecb4c4f6c53b3eac418a9d1d62eb4f5e06fe2565a4d28ea609c5ded4b4856c2557d3ed4f73919d41a4dfa55ca553f95f0732066eb1ccf75f62532a6cde7778253535902aca9f1bc0599c879919f9e97c5a2552396aa43fa9c7c14f09ac4b58438599cec7aa58df9dc4a2d6451e764655b0e86ac73107423275748c8f42d7432f52e0aa66dbd4d815f781bc939672a5cfd34529bb2753c379eeb89379ede9cdc0b83417deb64f72c7c5624b76da3e436e9df2bc37f5277d35ef3d0cdaa5ef311ecc30002f7bf3dc004dca1adb8820274e5dc3616f1f54a267330c775ad51cc328d4a827957a57e835f5c02aaafd7c240a8d2e7981ef02cf741c61aab92713de6d93150cc652a3fd43e411e5f5b2b4bbd2cddc788967f1359ed44df9ebee67bdb48499bd3fc8be1248a12639ba0050ecb2850fc4b18b087447b4576de40e702725f7f7546d12b18692fe34ce83ecb9d29d8125dee2931a32d2c93e9c2f892f91b8e3c6bd603030e187ad2919fe3d7d00ca264c8f5e3926082a58d9b4aaa9474fd9addb4a7cb16b62de9bbb99ff4596c7ec1c12fda5ec2bc719079da294f30abd342101cd183da0a148e4203b41774a6435315909aaf3a24391f0a1fc71a8702d2d867b2c9c4f4fc1a2a5abe045c5ccfce4978fd60bf30cff0c8cf9a8e9025a483f11d25c7241a8a6b560c5a592c802588d77c9c637b37e1152daf2ede21c98bfa79a646f61018e48af766efb2a4f439587e579965db146db98cdbe2ae855733ecdd13ab610dc1fba3a561d15136b6a413727aa94dbb295ffe5926485b46b4456028a5a54a297b125187ecf5b573ba448c4fbacdf00c3b26a613e5c9c43ba4386bf51451ba41dd1c6735d675bfe1bd98d98b6082c6232bed7ea4c8cfece83a9a3579d149b03efd667ac09fd3559fea2a7560cb34afb48a9cbc532c6287876bdbbfc21ad3cc84507ec20b68e37bb8edc87175a733b37bc7d4a680a332ae78dd08eeacfff21b403d3400733c7e71be8efc5dd15f0435da392813717323b221d08fc4ec442f5b2e0cc22f78d498c3e5ba82a1c843b8e83c50521956df33e937b96c310c28ea87c872646d7b42669c82060065c9a569b65897fc338ec8249a01a806262b8e5a911518d472863e899b2097cc19c9133aad5647f86ee46cd78eb2f2e9315e04f3f0f329bcbf4a5bc0f8331904fe43103db43a5672541792988826a1a11dbda077332a3c1f64e7324524ef87516549bcacf8295526f9bc157524a66d88d11317448f520450779118547ff1e705b296762c5270c641d1b0377e243c925c79e4e60215cadce3cc9fa01491431495a3c21008fd0e377dab55e52bec0ea20956ade18d36b679e04f892233168658d9ab5365e5e5ada0cfd98e1e771906337c873b95f6df5c906711df3b13180b8e4f51860c2e7e1dea7e629942fdd7f4919dd4b1d5153cb24664d06b6a834b6dee0cbf469cb399b1fcbb73778b19812384d8d8dd8c6f3ebb54a2269e4cdc80e6d1665faf18ff09d1e509ad3210bd19c0d51bcd36feda5eb7d0b34e6b3ec5f41ed88bc0adea687f38d44eda5e7939e2b1bf038ea48a165ddd2ee169bb07553d7c600a1f755706524787e5ac30c9d0ca7c23643e78e52daaba2508dc5b9d76abdb5a710b5bcc64ffa8a1f2a99dd963ab3447573e683bb055dd8317c9ceb5fce1ee711eac34b2d60e40f17307a2596440458b808ac823da4aca1aaeb371cba51d99a77b94c730a7a06293f89508490f2b51108e538c9d2624e3142b90796164070330b8ed526035bb59e94cca3e41b29a83d74e116c69d8a2de9cac89cb7cbea6c5cd13137bf588910486fcf583ae18fc1876cca9af48b803d6f5fd3eafe5fcd8001fe2ba27e1b23977d3781399b1fefe5176965293ce741d1694048271cad4a2d44376d400efd716bf19fa1a1d9f280dad7b0987e9986230f1ad31ba1cc505bbf8c214dd240e406ef5c9626031ef9166d58296259dcfe82b7b2bfa7bdaca64f152483d2d41b39283f2b283ed39231c29aec49bcf004fcd582955614cf56ec196c44935aa5ea5fffaac4fe73f6c573e23938f9edc4cbbe6004a60565a39f78e53c7a6e0da47651c03aff1145ac8f6f05b7b22889eac0bbff9b4b30b89ad6cc9011266d324c9b8ff96eb24f5dbd7e785a0a96fbaadc3547600884db5dc7a52d2f5bf198b10216556d6ea4c37f26ef768cd48df13b0f5093c4f1ae4d67617c6c49f44f212200f952e65a496cf7b4d270f030b8ca71e402eb10ec9eee5574eacd9fa8c90c82c5eb24c81f795069dd56fa2d944721838b9262c995d23fa657490ea85ebaa2a4024ad32242dad20b94526463930c19ae259834cfbb397fff0ad0e6088483bd2354e8cc9ca1074c93c9c97d425c67e05741c2c125a64b5f0ef2c0f273af22a9539b978cf063c682fbfb62f418345c7c7da246503cd198da99246c184aa83adaf0423531e2d88300c97240ab20a773be569cf751fd628a8cd6fe83fa2dbb5ec2dd45b010b68abb76ca9530107fd4869a54b608a0ecd29f2feb481c4c96421b80bef50a962c6f20b556835ee9328714f9443340bb020f188ffb9ce14050274c463eaf1acb99ee30389debf26e225bfd355aebd25ba1179c02738dca13e0233c469f97e85ea0af806a92398f1475dd1caa2248637651b1ea41ed21a941678965785942e41c731204a197e039d9d02fca853d998dca1091a1adbc09f41fe5649238bc2c40bccb4df3bbb89b29bfcb1feee8e6603b2a9e06e15073af7613ab8794d421663f332d1646ec01e8e440cc4a60bb27ed22ba9b0a37e224c84cbeb4a456aa4ebe864d3f9967beddb81e8386a3d19c34cc41b7e895982bbe751890c1442b469371d51f91288ac860693046951a041bb2e24186924ce0cf4620824a7dc367e03f3e15074ab0d01326b1bcfe86cf3c09448ab36a9bd2758659f5fb4326acf5219ebb8500f502205e3c8a0ce7f8024fd531fe6a1a66e51ee8d274b8827f48c92f82f57accc95366fabff106251d761ee623d5df4866258ade313766bf706675cead399ed1e4f6756968dc973516f47ba188a9d5a80d215f6b02134d82cd2051ec8536eb74255afe98618f79e4509d2f031cbf1851a8693b482fa368c968952c70aed284044a17564b2dcaaaa4a7f3a91760b3c908c9ff55ec444af78d9e87ed05bd72c044fd75dc4276772cb051c0be05cfe6f25609791867c9ae9e26070961f5f01c99dd58f0e12bf487f35bed282583885533fac5dc8899bb205ca4f6b8c358b64a6e31ea59cfdccba9159b7eda3fe583868f51d8e38b6a3793ca07a7c0a92c4b79bb96431fd33ef89aa11beb9a6a4cbe950d82637f8ff75cc08539a257c42c1ae10f21a5215be97e0384375605e21de58a96679e69835243dc3e9c6739f6dddb2e6b0cb886dbe0618f2199478460ba01eef5a1e1fc867006491de85c623bb950a3756f963e5afc57f4826fdecb55abd858928c8cc15d71262ca259088ce4cf9b051db90029d4ce81bfb7dda685404fb91248d6b63458436dd60b112e0d6b035a44d03c1acea1edcd7d24c7bc690c2b9e4b3cd1d69e23994b6a971115e3f87b3210a2bea3fc34d102f36e6a46f5f247552c4738e43a4055db6b9b9ee381fd47e9c78861100cc88a82a06128ef5673eb45d8050a3b213bf3a41867c93fd5848ea30ad4ceeb40a26922551650aa785dddf98d31a32bdb4a92b3112a626017e0febd93b49eabed48ef618d061a53a672770e5c68a16d86f0a209014d02fbbde6225cfb92e0176e7da904ffdac56ca3423b678f9806df2d0d34d55cd348463da6fe7587eeeba3015ac2fb123015eaab386cb8bbbddb55b5272c700f7601b7a7fbd8a153255ce0f3bc1d632c51c0d0277307a47a4d84de8b080506e87e27441b53ee8957e32dcc2b9ec020050c2106a9aef4ad30ecde5e793aa3011a00f1e70e56926289c0612cd4378428c54fe7ae44e7153a4a624b27df4563746abdd6007266a01ad930914f3a866d20851042928d995dfbb2d0526066f80dd5792d00b0dd5b315d061d02801864b16bd1c8b98afeda53759660dd4704a76b17c07c1d5a0b6e4efa936b8a930d063f19a66d178a869b6853f18d7a7a34870410bd31fcd216ff29c17d8d52fb3c62bc4b1e9cccdc3ba369a9ec4d6bc3a3d9b53cce06828516d08eb42325dc25b26b05ce7678bfe2b0896493830a526a32f9b782804cd36daed8534ec7dc62fcb19ea630f547cd079ac5e06337bac4c56345fff9a2c9b9fac6054f360f86050bb96b69952781c5aca4d655dc7ef8c42a529ba50a3ded68844263ff9722a0831cb87691988389debd3db92febf4164c2389465eb1cb1f57749314821a57036375fcadc6232c48635b41c11fb263b0e6c6a87ef3442b973e50fd90f4a1cbeeea200154c68af940e969bd08f97d99d8f4a1a3b2af1c02e2dd9d83790d64185404da7bd5a95f852bc3124c53c37a42cc4fc4d362e1aab445519988cd842fdc529e8643be0aa472e6205246014502c688c974373007d4b2e8dca160c946737eba38ab650cfb0a531fb1fae3f3ca1be6c650b76f441e17f8d9", 0x1000, 0x6, 0x0, 0x1, r4}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0xfffe, r7, &(0x7f00000019c0), 0x0, 0x10001, 0x0, 0x2, r8}]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:54 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:54 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:54 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f00002df000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) r3 = socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x2, 'xfrm0\x00', {0x4}, 0x6}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:55 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x2, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:55 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000040)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005cc000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='bridge0\x00') io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f0000000180)="c10d7bf6893e47b8e3b5f05be097d228716290dc1d607e310094374c587426b56ab6e5f379190f166148052f85cbab0a37c919066440b919ab2ce2b2ae1701f2d5fea4f44badfc141af9fc1bb6e0ab3659006a94a288294d18c2f48af6", 0x5d, 0x2, 0x0, 0x3, r5}, &(0x7f0000000280)) 14:02:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:55 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:55 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x4, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:55 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) r3 = socket$kcm(0x10, 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000440)=""/154, 0x9a}], 0x3, 0x3, 0x7) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:56 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:56 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x7, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:56 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:56 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:56 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080)=0xd5b, 0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000280)={0x780, 0x20, 0x30, 0x4b0, 0xfff, 0x1, 0x4, 0x0, {0x0, 0x524}, {0x5, 0x80000001, 0x1}, {0xda, 0x10001, 0x1}, {0x7, 0x5}, 0x0, 0x1, 0xea, 0xffff8000, 0x0, 0x8, 0x6, 0x9, 0x80000000, 0x2, 0x0, 0x10001, 0xe, 0x2, 0x2, 0x1}) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x10, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:57 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='bridge0\x00') getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x37, "29815e097ddf2ddf516b889abf2950ddf67fb3706c9117f447769614e080af46b97b94d2d0ced853338d7f4f95c08218e981c8fdf11c38"}, &(0x7f0000000100)=0x5b) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:57 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x700, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:57 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:57 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:57 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x2e, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38f"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:57 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:57 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x0, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:58 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x2, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:58 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x45, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:58 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x0, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:58 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x45, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:58 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) write$fb(r0, &(0x7f0000000040)="71af", 0x2) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x0, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:02:59 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:59 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x2d, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)={0xa8, 0x3b, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x97, 0x67, 0x0, 0x1, [@generic="e163e1813fd1a09ea937a348a3373e5e25ca09867afb351db7faad0ce5d265d7e092bca692afd489b7cde3cecbf83229987b2242e56af977896e0bafcfe757650f2829b46a250d7a14d36118b0a68f5884ba10b56b4fc0f88e5385ca3bf9129f3eb68f3e462e3fdbfd7e7c6a8929e29dd79aecc452a691550d8e128b50f01d3c66", @generic="bfce4cc45f05806a20f504a7da22e730fce2"]}]}, 0xa8}, {&(0x7f0000000040)={0x10, 0x40, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x10}, {&(0x7f0000000640)={0x5e0, 0x39, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast1}, @generic="e90937527244ae45c67aa79be48e74fcd66f9804d23c1cc6ba01acf367985b3fa5b7a1836d29164c999519c75a27fbb756f8e9f7d7b8260e865cc97631cbc14a0262019fe95ae2c1644a52a2fd9ea5327a6660971fec50bb22fb24282e260e60a8f87496607fe0d123bf6199ebb108be5dec7190d2abc5f6ce56fcf9bbc6ac70cc0fbd610eca818f281d337b986a9d2b81de", @generic="ba1b7e6228abed60fdabda5e85c53b0caefa9b1c9432b67e47680bedafe377e9d3667139f1172ea792f76bfd891c2769e0f6d45d20b7ebb3d7e622f8fc3116ee53bb47d715cda9ae0608439e6484d70f70be6fe5e0242bbfbabb93f1da2fe8ad1e40c8f27e557cf69c0d8ca444974d9fd1b824445887357ee85b5c2e4073789da85f2a3a45f9d5208a581836c575347080f5db4bd7412ca060225c41176741be6daf03deebde001520d5a7dd62d9a28f92e3ffffc79a250a", @nested={0x2b2, 0x37, 0x0, 0x1, [@generic="faae3b5639142ca2d841416112aac5da5ac863a9abc7a0fb056c79b1eae600c2350440a16a8b50b2f6013415c71009eac1d8dd76f5f1e4636a7a1ca23374a16222e5c4c52b6df355f864aca92aebe4b3f9846a9058597435486935942364130ac446489cdb8cc17dde4fc8941e792cea2c49a6", @generic="8b85bf825457217b7f348bed5ffd1af2b3e3a17567ba40d0f193e2c4d91f503f5c16d2b1f0d4c82dac25c14bf3e3f90b7f1a98714450deb2c51aead9af515e821ae8621332e371a3600188fc7edfcc0b21d5755badff36f3643babf23422e69a77e09b5a147210", @generic="018db312c9eed63b7da9286e0e6dbe4fbdd6aa18e4e35c6e615ddf6be5ddefbc4153daa0a2ab5309f4451be62a877da6eda2491fe5ad1003127045139e2e7080db07bcca42060745b3a7f0e6da01339a574fcc9bc86642a6aae0f80bceee1f8f478b4e0e41b63ce6c56b1906fc163506ac7588c163d19f6ebc59fccb957aa706ae1ead98b666b91c2dbd009614033637c926df334de44b1f6950df9a3fe370fb41284362492ad757957ce46321a30ba852be68f868b81e34c17fa720755b4e54bc8db2391cfc1aba", @generic="fd83c3c8c9b9f402722a62166cca7ce92e244424ff0c010856e356ee18727e3b9cc36778be223fe731b7b22e19d2a7729b53f23a3c51789be329efde16441f3224e2ce169fa925b972cd8481c715ad91d58c4f35b0cd1252a0b5f27000b3f9ab7f3d9e023314c8895889fd08824968bdb88f8ab1b8ebe7786aaa3dc547c887a4b693930abc581d345c2b6463495d1ae8af548a0412863550e1bb9d0e20098382879db1ee1e57e1b059cf61a14aae3852f23edc8a30b4e8cbc1d6907378affdbb0e755b5502cf11c758605662bf89a76eeb7c14c56b3c09c74abf9d9741209e66a7ab48ce31d31e9e38542d8d42", @generic="18d7c3052e8d168394655b0d17996d28d20b590f48d8261d0a9390316324d1"]}, @nested={0x1ba, 0x7f, 0x0, 0x1, [@generic="bb921007a7512f5049b38486bd6fdbad9bc6d65c17429c03ab813d02246a96cf8f3a61b26c44861d012b98eb228505b0c735f4fb518ff4d8ea9d08b37e4c9f1a395afd6f88526a208a7c63b123cfdad214e5dc1c229e9f8a2f92a85564aad37ddef668f4abf3c65dab20095f04211d61a2ddf9b55d4d5c0c4a0b30fd4b01a0e0f28589f71c13d9c1e8304e34c5170c6f7ee8ef68658c6e2f7131825204236b968fc91f7d79bc8377d2fd08b16fe79386e8f510593de6dc30098bdc0a5f679c1667798e49ecafaf1dba09a58fb10144412219a93496cad815bd222ce0ee901353aeebb81c2e0cc9b2a315d8e76505cac9709539bd4c", @generic="6786bfd4704dad5f202467411498ce96b3ee35dec24a0c49469b2c50ea174d70798c16cdb095c6712a7f29f8ff23eaeec11479a5ba439f574e365ad60ebb9842aab364b4e73d40a148b43277be1a58adccec10331694b96997228822b4ad52772292d2470711e74c514f819f849a5cc1ca17c4600893c4a5245091bbe7e63017d64703334ee2386280d401dc8373ec0532037dfd81cdc9b68e835b164652c4a7d43bd103263518bf6829672d0668bf82f8fb8a0b4f0ca5b4ff4d81ae07", @typed={0x4, 0xa}]}]}, 0x5e0}, {&(0x7f0000000c40)={0x274, 0x1b, 0x4, 0x70bd28, 0x25dfdbfc, "", [@generic="fc4190dbc18c00def6f9b83c7e9a6ed7ae77d97d79c62ca4ae19a1b42ecf2fde202bd30d36068f0fe455d9030ba07a39f47c5a8c2ce7ac43d799b849218f18c46afb3ed89823499700bb0551780545a8df01c85a39c5770865301d037169c8bdf84519a1657375c5930f8ba768af5cca0f20f58a75fca7293073e3", @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast1}, @generic="209e07430719e9cb9e6353e08603fe006d0331426e3226b95493009775cf536b784bd6a33bb7fc4a21e702108cf3e468b1734e2438edf4d201072ca544458acba6f2ef15a151eeb6228a83ab67412ca1cd891f8f68aa6cd40c96d039074208f14955ed407e3b330a0fa3a37fba4745f6acb3aa65a03faf78392e9f36b40d06d454b45a6178bf7f20ac266a8aab7e58b37c300f7ba31f46950b60666fd785e295f6d2bebaac393d88c7e974b094d8fc9404f7be14450aeaf6c09bae4691e1d9a272ce0743bcf8b3fb0e918684db65c60d85b7f48edd2d0ee4cb91caceff35551890db", @generic="9d2e45f378c189dbb6d92bde225a56e53b8d592c3fd01028f81448c15477274075c9267d54e8023c1f", @generic="0e601bbcadd42c6bf6b28a3a5d12b999afade4a7231a63faf5dcb5caed8e6dc42517c2b36ecd90048b7f2499aea791ba2896e1f67ff505ba4d597c27e4c9252867bd06da0259817bc8afd43d222812d2e55f66929cf94f0c6f17a53ae3c67cdd4e87f1be7cbd00d3c53126dbd08e98ba5487e637a365e491f897c99ee2146f93d7ad56eb840e8cc66125b70c59858427eb905be3550e7bc4676df31b7c722a382a21fca2b5a8ff38c11ac5d977abed563a49c9ffa637a9180e6053e7d8c75e8ba2c474beb83943d6d01e8763d2", @typed={0x8, 0x8, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x274}, {&(0x7f0000000ec0)={0x444, 0x16, 0x20, 0x70bd28, 0x25dfdbff, "", [@nested={0xc0, 0x51, 0x0, 0x1, [@typed={0x14, 0x45, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xa6, 0x5c, 0x0, 0x0, @binary="9f6934055f69517a5efc19152dd5738dc28fc31b7987264dc9228b8f55533df98736d8c33d608128c0c7e9c42faac520c4cef7e5cfa836d83b2296150327ce99b9554de20c078c748e4f3ec7b4f2c2a9bac6dee8d5d5bd1abf38400c0878bfd42b7667ecbe9ddc0e29adba6283ed4fa7da3a3117490d8df938fb530d477af9054f2a1b1194a07435246dbb80266b9f37d6bfb7a2db41d40c1f6d58a001a0ea08af1e"}]}, @nested={0x366, 0x43, 0x0, 0x1, [@generic="6a405bc905bc85dbb0597ff682ab21b048c7b4307c554344ca8b7957d413d18febc7da1328955411aaedfe07df7ad07882939fb85e2da2039b99269f88a0a67f99859b53975f4a606801d4f1d3d280792d5173bb5ee8b81d0a28024213d0e45cadc6e94408538adb3b7083baaf1a1bbc02ec89b01f6212e3df077d94b3c3adb42dac3f9ca1d37d95f8244b6772f4f039ed9759e294eaf4bb46c3e8cff2b41d4f43bec1d17903fc1464de77a531764bca6967f96e6bc150f368a2e96f3fc93031b4453ac4c1d84fd6221f89c751005cb6f9c71e4baf224bce386cae0d95fe9e378a2839db58fc", @generic="0718291bf4d6927dd402", @generic="b827ac28e7d78e6e93b0696f81e3f7755d40f3c03ceec142cb9f4890f867238b40adc640b4624c9127e618b6bbcfacef807c6feb871c0d7c130a51058cb48bd483aa4bf4b7fdad1724e887e3e78790258b2ea5600de558c1e47c4fb70dff26f6de9464bb653a7d78bbe2bf8648e669ade086dcb5c3d88cdbd237862c1783041507b9c5fe451494660201152969ddb1b02fa4c6c3976a3f23caaccb", @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @generic="aac0ec822119b1c65f398b6f5be922afac103c2f761d114139520467c13a6644f18e47388e4ce049bce0e3f775a2f46e15c6628588c21305cde5aa8b1ff84185a1fdf687d2b861d2603b48c6eb4c814491b5ae6aa83a6700fdcac1e3e2d2bf6852911cdbdddbc43025e7bb0205d5806e064b900da52fbfc3e00fe3c9fc73e2e9551df29f1fde4df44139bab276ac387bb92bf1f31aab00a3da8abff2cc34b6e692da98d3f92c24abebdebfadcc87fca0ccf947753c419e14a99d412332a84ebdaa8113bbabd18eeee3b1e7e69f2903aa73b6c53bacf2aa11560d97ec5e", @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@broadcast}, @generic="8495b5e2c70a54b4ca3eec621f0ae5a3643267f9763823dded8cb1fd9de2849abec851651ed53b3f24dac9a24c5c53b896e898f11890b9515982c5f3011f837d3d52cda2ada94a722ce8c65093a6a52acfa1adb16836021eba375135579e7c58e6d8de8391e07c8efe24ba2f2dfde33a8f4006622fb266bc9e4677a2fc382ead3c2762c1fdde2cd044661a94268533368ac6a9cb0c685c7b52df4da860e425b26caa07a0cd14ebed17baa34eceb951ad3661b59583ed9366b607bb03a6b3c95fb18ae9ae7f348b21d94c93c26d2d417cf16c21b0f0bdd27d355e50985f83"]}, @typed={0xc, 0x45, 0x0, 0x0, @u64}]}, 0x444}, {&(0x7f0000000440)={0xa0, 0x22, 0x100, 0x70bd28, 0x25dfdbfb, "", [@generic="ed95825a2b4bd2bbe1ee61f21c3f661f6c16b841a9f1eb7a169e6659441137cecbb5c11cda9da22e282e8b3ec2001bf52d97731757c8d9886821849367bbaa535ed9ef38ef803190b77151f5757f868be4bb8dfac6026139782ff3369098cb06b3fa2d555e5e469e89e605e93c504292a5cf", @nested={0x4, 0x32}, @generic="0147fd8c9c2728a49f8d0c50952b70811fc4f73480dc66380da7"]}, 0xa0}, {&(0x7f0000000500)={0x9c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbff, "", [@generic="5c105052fe334fc57203c1ebf7b8b2bd96ed9240156e33615bf7d2ba45fba8b1c37d494dd8085ef874264500fbe456377c60bbcc3c205864e748b54f4f9e23e9c541c0ae5d851e6e7fc4afed3261c4b2af2f349603c88df5ed893c1e9c9d5322cb3ea5a6255bd9d11940a111cdfbd7737bbd5fd372e8348e8c94ec89a00240344e54491bda5cee67ed"]}, 0x9c}], 0x7, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:59 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x4, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:02:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, 0x0) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:59 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:59 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x45, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:59 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x183, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:59 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x51, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad325"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:02:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, 0x0) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:02:59 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r0, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:03:00 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x7, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x440000) 14:03:00 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup(r1) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:03:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, 0x0) ftruncate(r1, 0x9) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 14:03:00 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x5c, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad3257b9bd89dd7999e0864aaeb"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:03:00 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x51, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad325"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 377.636303][T16238] ------------[ cut here ]------------ [ 377.642246][T16238] WARNING: CPU: 0 PID: 16238 at drivers/gpu/drm/drm_gem_shmem_helper.c:562 drm_gem_shmem_vm_open+0x96/0xb0 [ 377.707616][T16238] Modules linked in: [ 377.717541][T16238] CPU: 0 PID: 16238 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0 [ 377.740048][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.806492][T16238] RIP: 0010:drm_gem_shmem_vm_open+0x96/0xb0 14:03:00 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10240, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x50000) dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='bridge0\x00') io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x2, 0x0, r1, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x0, r3}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 377.855135][T16238] Code: 89 c6 e8 fd ab 20 fd 85 db 75 1a e8 b4 a4 20 fd 48 89 ef 5b 5d 41 5c e9 c8 66 f5 ff e8 a3 a4 20 fd 0f 0b eb ca e8 9a a4 20 fd <0f> 0b eb dd e8 f1 f9 67 fd eb 89 e8 ea f9 67 fd eb a8 0f 1f 84 00 14:03:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:03:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) [ 377.932665][T16238] RSP: 0018:ffffc9000553fb98 EFLAGS: 00010216 [ 377.960265][T16238] RAX: 0000000000000aaa RBX: 00000000fffffffc RCX: ffffc9000d937000 14:03:00 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x51, 0x0, &(0x7f0000003840)="f5e4a27b7a9f4505acbdcb2fda65a79e4ecf77b68d7136e9928193bcee6f5e345a28e0b9e6ceb30b6f5c11c5e38fa5d54bf7bd93dbb381300b3e9e5acafb39b8af48ed6f09ed6a93bcc281ddb3d05ad325"}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 378.053213][T16238] RDX: 0000000000040000 RSI: ffffffff845559e6 RDI: 0000000000000003 [ 378.113655][T16238] RBP: ffff88807a771b58 R08: 0000000000000000 R09: 0000000000000000 14:03:00 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 378.159676][T16238] R10: ffffffff845559c3 R11: 0000000000000001 R12: ffff888145f91000 [ 378.217300][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.223688][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.241264][T16238] R13: ffff888076969318 R14: 000000002017c000 R15: ffff88807a771be8 [ 378.289813][T16238] FS: 00007f179208e700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 378.359481][T16238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.396486][T16238] CR2: 00007f8952f2da00 CR3: 000000001f7f3000 CR4: 00000000003506f0 14:03:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003800), 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(r1, 0x9) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x2d, 0x440000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:03:01 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f000017c000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003940)={0x4, 0x0, &(0x7f0000003800)=[@exit_looper], 0x0, 0x0, &(0x7f0000003840)}) io_setup(0x1, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x9) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$kcm(0x10, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) [ 378.480298][T16238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.538160][T16238] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.600632][T16238] Call Trace: [ 378.627542][T16238] ? drm_gem_shmem_fault+0x2d0/0x2d0 [ 378.661101][T16238] __split_vma+0x23c/0x550 [ 378.675749][T16238] __do_munmap+0x32a/0x11c0 [ 378.685012][T16238] mmap_region+0x2fd/0x1650 [ 378.746629][T16238] ? security_mmap_addr+0x77/0x90 [ 378.778414][T16238] do_mmap+0x869/0xfb0 [ 378.801086][T16238] vm_mmap_pgoff+0x1b7/0x290 [ 378.818044][T16238] ? randomize_stack_top+0x100/0x100 [ 378.835474][T16238] ? __fget_files+0x23d/0x3e0 [ 378.841211][T16238] ksys_mmap_pgoff+0x49f/0x620 [ 378.865685][T16238] ? mlock_future_check+0x120/0x120 [ 378.881842][T16238] ? syscall_enter_from_user_mode+0x2b/0x70 [ 378.903207][T16238] do_syscall_64+0x35/0xb0 [ 378.928928][T16238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 378.944495][T16238] RIP: 0033:0x7f1794b17922 [ 378.960468][T16238] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 378.989840][T16238] RSP: 002b:00007f179208e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 379.010487][T16238] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f1794b17922 [ 379.031974][T16238] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 000000002017c000 [ 379.048145][T16238] RBP: 000000002017c000 R08: 0000000000000005 R09: 0000000000000000 [ 379.085090][T16238] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 379.094499][T16238] R13: 0000000020190000 R14: 0000000000000000 R15: 000000002017c000 [ 379.133574][T16238] Kernel panic - not syncing: panic_on_warn set ... [ 379.140199][T16238] CPU: 1 PID: 16238 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0 [ 379.148981][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.159138][T16238] Call Trace: [ 379.162455][T16238] dump_stack_lvl+0xcd/0x134 [ 379.167076][T16238] panic+0x2b0/0x6dd [ 379.171013][T16238] ? __warn_printk+0xf3/0xf3 [ 379.175632][T16238] ? __warn.cold+0x1a/0x44 [ 379.180199][T16238] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 379.185515][T16238] __warn.cold+0x35/0x44 [ 379.189772][T16238] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 379.195074][T16238] report_bug+0x1bd/0x210 [ 379.199511][T16238] handle_bug+0x3c/0x60 [ 379.203693][T16238] exc_invalid_op+0x14/0x40 [ 379.208399][T16238] asm_exc_invalid_op+0x12/0x20 [ 379.213295][T16238] RIP: 0010:drm_gem_shmem_vm_open+0x96/0xb0 [ 379.219334][T16238] Code: 89 c6 e8 fd ab 20 fd 85 db 75 1a e8 b4 a4 20 fd 48 89 ef 5b 5d 41 5c e9 c8 66 f5 ff e8 a3 a4 20 fd 0f 0b eb ca e8 9a a4 20 fd <0f> 0b eb dd e8 f1 f9 67 fd eb 89 e8 ea f9 67 fd eb a8 0f 1f 84 00 [ 379.238972][T16238] RSP: 0018:ffffc9000553fb98 EFLAGS: 00010216 [ 379.245163][T16238] RAX: 0000000000000aaa RBX: 00000000fffffffc RCX: ffffc9000d937000 [ 379.253154][T16238] RDX: 0000000000040000 RSI: ffffffff845559e6 RDI: 0000000000000003 [ 379.261242][T16238] RBP: ffff88807a771b58 R08: 0000000000000000 R09: 0000000000000000 [ 379.269233][T16238] R10: ffffffff845559c3 R11: 0000000000000001 R12: ffff888145f91000 [ 379.277221][T16238] R13: ffff888076969318 R14: 000000002017c000 R15: ffff88807a771be8 [ 379.285211][T16238] ? drm_gem_shmem_vm_open+0x73/0xb0 [ 379.290530][T16238] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 379.295845][T16238] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 379.301202][T16238] ? drm_gem_shmem_fault+0x2d0/0x2d0 [ 379.306542][T16238] __split_vma+0x23c/0x550 [ 379.310988][T16238] __do_munmap+0x32a/0x11c0 [ 379.315520][T16238] mmap_region+0x2fd/0x1650 [ 379.320037][T16238] ? security_mmap_addr+0x77/0x90 [ 379.325082][T16238] do_mmap+0x869/0xfb0 [ 379.329175][T16238] vm_mmap_pgoff+0x1b7/0x290 [ 379.333796][T16238] ? randomize_stack_top+0x100/0x100 [ 379.339111][T16238] ? __fget_files+0x23d/0x3e0 [ 379.343819][T16238] ksys_mmap_pgoff+0x49f/0x620 [ 379.348613][T16238] ? mlock_future_check+0x120/0x120 [ 379.353839][T16238] ? syscall_enter_from_user_mode+0x2b/0x70 [ 379.359760][T16238] do_syscall_64+0x35/0xb0 [ 379.364198][T16238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 379.370109][T16238] RIP: 0033:0x7f1794b17922 [ 379.374545][T16238] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 379.394168][T16238] RSP: 002b:00007f179208e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 379.402605][T16238] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f1794b17922 [ 379.410595][T16238] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 000000002017c000 [ 379.418578][T16238] RBP: 000000002017c000 R08: 0000000000000005 R09: 0000000000000000 [ 379.426563][T16238] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 379.434555][T16238] R13: 0000000020190000 R14: 0000000000000000 R15: 000000002017c000 [ 379.443056][T16238] Kernel Offset: disabled [ 379.447595][T16238] Rebooting in 86400 seconds..