7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x2) shutdown(r4, 0x1) io_uring_enter(r1, 0x48c9, 0xf301, 0x2, &(0x7f0000000080), 0x8) 04:02:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x6, 0xd22) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x3, &(0x7f00000004c0)=""/202, 0xca}, 0x0, 0x40, 0x0, {0x3, r5}}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) socket$inet(0x2, 0x6, 0xd22) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x3, &(0x7f00000004c0)=""/202, 0xca}, 0x0, 0x40, 0x0, {0x3, r5}}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) (async) 04:02:43 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) unshare(0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0xff}, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r5}) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x1000, 0x4) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) unshare(0x400) (async) pipe(&(0x7f0000000200)) (async) pselect6(0x40, &(0x7f0000000040)={0xff}, 0x0, 0x0, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r5}) (async) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x1000, 0x4) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:02:43 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8) r1 = syz_io_uring_setup(0x18a, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x2) (async) shutdown(r4, 0x1) (async) io_uring_enter(r1, 0x48c9, 0xf301, 0x2, &(0x7f0000000080), 0x8) 04:02:43 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8) r1 = syz_io_uring_setup(0x18a, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x2) (async) shutdown(r4, 0x1) (async) io_uring_enter(r1, 0x48c9, 0xf301, 0x2, &(0x7f0000000080), 0x8) 04:02:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7536, 0x5c4b, 0x3, &(0x7f00000003c0)={[0xf1b8]}, 0x8) r4 = syz_io_uring_setup(0x193d, &(0x7f0000000180)={0x0, 0xa5ce, 0x10, 0x3, 0xa5, 0x0, r0}, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x446514470d7dc6e4, @fd_index=0x4, 0x0, 0x1, 0x0, 0x10}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r7, &(0x7f0000000380)=0x80, &(0x7f0000000500)=@x25={0x9, @remote}, 0x0, 0x800}, 0x3) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000001, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) r10 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r10, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000001000000180000008567b2b72d276b719ccacf49a9a06fd37f5c6500d4623d51d873d00d62a8f2bb1d4206bd852b3f6cb37086b485ff33de55d4c3d0e237c2b714e50be95c8b2bc644b5df0759b1d3349e5dd2a74778dc786dcecdbe539091501ebf2ab496b1628d06cfe18e46af2af05ed892de25c758e66c1b3b9ddb5089090840831b86fa52f1818fa3f793a24c4d8793a879e7b547a397381fd4fb020000006b", @ANYRES32=r4, @ANYBLOB="0000003a5c8fcb7507cdbec842a8e4ff37d9ec4151b27a89810bd962b0d302315f8ae1a995de1d3427138b030e0fe8394c7265174ee8d502003efcecaa5bec4f16f91f916e06b3023836abcd18061c1ac2038977b1449bcc2611b2d9a68cf16fe42c0975b45a2c67bbf74d9b7e0df392c621c82325fce4218c53284eb68328d64e5395ed1d91b54187210caf7c64d89374a2c1afbba80c5079ab7b39a1293f00925e2a21105031dd5fb028ec034f6ac4d9"]) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000003200000000000000000001000000000000007b922c390ea624c94035cd6d227954915ee2ef9292ef596ad978cebc34e5f7dc09f5a0e5822bd67758a091039720187e76a0626caba592fb", @ANYRES32=r0, @ANYBLOB="00f2ff00fe01001c00"/28]) shutdown(r7, 0x1) 04:02:44 executing program 5: r0 = syz_io_uring_setup(0x773e, &(0x7f00000002c0)={0x0, 0x972c, 0x0, 0x1, 0x2e3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000380)=0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x2, 0x0, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) sendfile(r6, r8, 0x0, 0x3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) shutdown(r7, 0x1) 04:02:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x42a402, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f0000000180)={0x80000000}, r6}, 0x40) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000080), 0x0, 0x8080) (async) shutdown(r3, 0x1) 04:02:44 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x10, r5, 0x10000000) 04:02:44 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x208804, 0x0) syz_io_uring_setup(0x550a, &(0x7f0000000340)={0x0, 0xc124, 0x20, 0x1, 0x1c5, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) (async) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x4800, 0xd2) (async, rerun: 64) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r6, &(0x7f0000000180)={0x180400, 0xb41b5ea5ae6747e}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}, 0x2) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 64) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x52000, 0x0) (rerun: 64) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r5, 0x58, &(0x7f00000004c0)}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r9, 0x800, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800) (async) shutdown(r3, 0x1) 04:02:44 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:44 executing program 5: r0 = syz_io_uring_setup(0x773e, &(0x7f00000002c0)={0x0, 0x972c, 0x0, 0x1, 0x2e3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000380)=0x0) (async) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xffffffff}, 0x1) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x2, 0x0, 0x4) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r6, r8, 0x0, 0x3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) (async) shutdown(r7, 0x1) 04:02:44 executing program 5: r0 = syz_io_uring_setup(0x773e, &(0x7f00000002c0)={0x0, 0x972c, 0x0, 0x1, 0x2e3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000380)=0x0) (async) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xffffffff}, 0x1) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x2, 0x0, 0x4) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r6, r8, 0x0, 0x3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) (async) shutdown(r7, 0x1) 04:02:44 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x800, 0x7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r4, r5, 0xffffffffffffffff], 0x3, 0x0, 0x0, {0x0, r6}}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) 04:02:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x7536, 0x5c4b, 0x3, &(0x7f00000003c0)={[0xf1b8]}, 0x8) (async) r4 = syz_io_uring_setup(0x193d, &(0x7f0000000180)={0x0, 0xa5ce, 0x10, 0x3, 0xa5, 0x0, r0}, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x446514470d7dc6e4, @fd_index=0x4, 0x0, 0x1, 0x0, 0x10}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r7, &(0x7f0000000380)=0x80, &(0x7f0000000500)=@x25={0x9, @remote}, 0x0, 0x800}, 0x3) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000001, 0x1}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) r10 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r10, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000001000000180000008567b2b72d276b719ccacf49a9a06fd37f5c6500d4623d51d873d00d62a8f2bb1d4206bd852b3f6cb37086b485ff33de55d4c3d0e237c2b714e50be95c8b2bc644b5df0759b1d3349e5dd2a74778dc786dcecdbe539091501ebf2ab496b1628d06cfe18e46af2af05ed892de25c758e66c1b3b9ddb5089090840831b86fa52f1818fa3f793a24c4d8793a879e7b547a397381fd4fb020000006b", @ANYRES32=r4, @ANYBLOB="0000003a5c8fcb7507cdbec842a8e4ff37d9ec4151b27a89810bd962b0d302315f8ae1a995de1d3427138b030e0fe8394c7265174ee8d502003efcecaa5bec4f16f91f916e06b3023836abcd18061c1ac2038977b1449bcc2611b2d9a68cf16fe42c0975b45a2c67bbf74d9b7e0df392c621c82325fce4218c53284eb68328d64e5395ed1d91b54187210caf7c64d89374a2c1afbba80c5079ab7b39a1293f00925e2a21105031dd5fb028ec034f6ac4d9"]) (async) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000003200000000000000000001000000000000007b922c390ea624c94035cd6d227954915ee2ef9292ef596ad978cebc34e5f7dc09f5a0e5822bd67758a091039720187e76a0626caba592fb", @ANYRES32=r0, @ANYBLOB="00f2ff00fe01001c00"/28]) (async) shutdown(r7, 0x1) 04:02:45 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x42a402, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f0000000180)={0x80000000}, r6}, 0x40) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000080), 0x0, 0x8080) (async) shutdown(r3, 0x1) 04:02:45 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x10, r5, 0x10000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x10, r5, 0x10000000) (async) 04:02:45 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:45 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) shutdown(r5, 0x2) 04:02:45 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = dup(r0) shutdown(r3, 0x1) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffbff, 0x7fffffff, 0x1ff, 0x4, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x5, 0x4, 0xc}, 0x48) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r7, 0x7120, 0xabf3, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) 04:02:45 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x800, 0x7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r4, r5, 0xffffffffffffffff], 0x3, 0x0, 0x0, {0x0, r6}}, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) 04:02:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x7536, 0x5c4b, 0x3, &(0x7f00000003c0)={[0xf1b8]}, 0x8) (async) r4 = syz_io_uring_setup(0x193d, &(0x7f0000000180)={0x0, 0xa5ce, 0x10, 0x3, 0xa5, 0x0, r0}, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x446514470d7dc6e4, @fd_index=0x4, 0x0, 0x1, 0x0, 0x10}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r7, &(0x7f0000000380)=0x80, &(0x7f0000000500)=@x25={0x9, @remote}, 0x0, 0x800}, 0x3) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000001, 0x1}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) r10 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r10, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000001000000180000008567b2b72d276b719ccacf49a9a06fd37f5c6500d4623d51d873d00d62a8f2bb1d4206bd852b3f6cb37086b485ff33de55d4c3d0e237c2b714e50be95c8b2bc644b5df0759b1d3349e5dd2a74778dc786dcecdbe539091501ebf2ab496b1628d06cfe18e46af2af05ed892de25c758e66c1b3b9ddb5089090840831b86fa52f1818fa3f793a24c4d8793a879e7b547a397381fd4fb020000006b", @ANYRES32=r4, @ANYBLOB="0000003a5c8fcb7507cdbec842a8e4ff37d9ec4151b27a89810bd962b0d302315f8ae1a995de1d3427138b030e0fe8394c7265174ee8d502003efcecaa5bec4f16f91f916e06b3023836abcd18061c1ac2038977b1449bcc2611b2d9a68cf16fe42c0975b45a2c67bbf74d9b7e0df392c621c82325fce4218c53284eb68328d64e5395ed1d91b54187210caf7c64d89374a2c1afbba80c5079ab7b39a1293f00925e2a21105031dd5fb028ec034f6ac4d9"]) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000003200000000000000000001000000000000007b922c390ea624c94035cd6d227954915ee2ef9292ef596ad978cebc34e5f7dc09f5a0e5822bd67758a091039720187e76a0626caba592fb", @ANYRES32=r0, @ANYBLOB="00f2ff00fe01001c00"/28]) shutdown(r7, 0x1) 04:02:46 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r0, 0x8000000) syz_io_uring_setup(0x69ba, &(0x7f0000000180)={0x0, 0x2d82, 0x8, 0x1, 0x267}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xd12}}, './file0\x00'}) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r7, &(0x7f0000000280)={0x10000000}, r3, 0x3, 0x0, 0x1}, 0x9) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:46 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) shutdown(r5, 0x2) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) shutdown(r5, 0x2) (async) 04:02:46 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = dup(r0) (async, rerun: 32) shutdown(r3, 0x1) (async, rerun: 32) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffbff, 0x7fffffff, 0x1ff, 0x4, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x5, 0x4, 0xc}, 0x48) (rerun: 64) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r7, 0x7120, 0xabf3, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) 04:02:46 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_clone(0x0, 0x0, 0x61, 0x0, 0x0, 0x0) migrate_pages(r3, 0x5, 0x0, &(0x7f00000000c0)=0x401) statx(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x100, 0x800, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x84800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="8ae8ead3d68b83df72de4e10c572732edb4181985a956105a2c7fc41cc74756b9930133ec506ee03b5f1c510708311a6764c344b478f27267ddf4b28f74e94db39228fa116d4d1145325", 0x4a}], 0x2, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r2}}}], 0x20, 0x4}}, {{&(0x7f0000000300)=@file={0x1}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)="512c365fe651a0fdb2e84a50ef85fe49f0dea08683508b82d94db31513385ba9aa16db0eaa3f749b7246e914c63f4931de32cfc5631fb2333e78a8c043092cae99b63e26051dcac44149dbd4035e32", 0x4f}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="20fbb18b", 0x4}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}, @rights={{0x1c, 0x1, 0x1, [r1, r9, r10]}}], 0x40}}], 0x3, 0x4008800) io_uring_enter(0xffffffffffffffff, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) shutdown(r0, 0x1) 04:02:46 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async, rerun: 64) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 64) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x800, 0x7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r4, r5, 0xffffffffffffffff], 0x3, 0x0, 0x0, {0x0, r6}}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) 04:02:46 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) shutdown(r5, 0x2) 04:02:46 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_clone(0x0, 0x0, 0x61, 0x0, 0x0, 0x0) migrate_pages(r3, 0x5, 0x0, &(0x7f00000000c0)=0x401) (async) statx(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x100, 0x800, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x84800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="8ae8ead3d68b83df72de4e10c572732edb4181985a956105a2c7fc41cc74756b9930133ec506ee03b5f1c510708311a6764c344b478f27267ddf4b28f74e94db39228fa116d4d1145325", 0x4a}], 0x2, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r2}}}], 0x20, 0x4}}, {{&(0x7f0000000300)=@file={0x1}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)="512c365fe651a0fdb2e84a50ef85fe49f0dea08683508b82d94db31513385ba9aa16db0eaa3f749b7246e914c63f4931de32cfc5631fb2333e78a8c043092cae99b63e26051dcac44149dbd4035e32", 0x4f}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="20fbb18b", 0x4}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}, @rights={{0x1c, 0x1, 0x1, [r1, r9, r10]}}], 0x40}}], 0x3, 0x4008800) io_uring_enter(0xffffffffffffffff, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) (async) shutdown(r0, 0x1) 04:02:46 executing program 5: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x6e37, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:02:46 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_clone(0x0, 0x0, 0x61, 0x0, 0x0, 0x0) migrate_pages(r3, 0x5, 0x0, &(0x7f00000000c0)=0x401) (async) statx(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x100, 0x800, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) (async, rerun: 64) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x84800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="8ae8ead3d68b83df72de4e10c572732edb4181985a956105a2c7fc41cc74756b9930133ec506ee03b5f1c510708311a6764c344b478f27267ddf4b28f74e94db39228fa116d4d1145325", 0x4a}], 0x2, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r2}}}], 0x20, 0x4}}, {{&(0x7f0000000300)=@file={0x1}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)="512c365fe651a0fdb2e84a50ef85fe49f0dea08683508b82d94db31513385ba9aa16db0eaa3f749b7246e914c63f4931de32cfc5631fb2333e78a8c043092cae99b63e26051dcac44149dbd4035e32", 0x4f}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="20fbb18b", 0x4}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}, @rights={{0x1c, 0x1, 0x1, [r1, r9, r10]}}], 0x40}}], 0x3, 0x4008800) io_uring_enter(0xffffffffffffffff, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) (async) shutdown(r0, 0x1) 04:02:46 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0xd104, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) write$eventfd(r6, &(0x7f0000000180)=0x200, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) recvmsg(r7, &(0x7f00000023c0)={&(0x7f0000000340)=@caif=@rfm, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/4096, 0x1000}, 0x82) 04:02:46 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0xd104, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) write$eventfd(r6, &(0x7f0000000180)=0x200, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) recvmsg(r7, &(0x7f00000023c0)={&(0x7f0000000340)=@caif=@rfm, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/4096, 0x1000}, 0x82) 04:02:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r2, 0x1) 04:02:46 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r0, 0x8000000) (async) syz_io_uring_setup(0x69ba, &(0x7f0000000180)={0x0, 0x2d82, 0x8, 0x1, 0x267}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xd12}}, './file0\x00'}) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r7, &(0x7f0000000280)={0x10000000}, r3, 0x3, 0x0, 0x1}, 0x9) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:46 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0xd104, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) write$eventfd(r6, &(0x7f0000000180)=0x200, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) recvmsg(r7, &(0x7f00000023c0)={&(0x7f0000000340)=@caif=@rfm, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/4096, 0x1000}, 0x82) pipe(&(0x7f00000001c0)) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0xd104, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) write$eventfd(r6, &(0x7f0000000180)=0x200, 0x8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) recvmsg(r7, &(0x7f00000023c0)={&(0x7f0000000340)=@caif=@rfm, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/4096, 0x1000}, 0x82) (async) 04:02:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = dup(r0) shutdown(r3, 0x1) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffbff, 0x7fffffff, 0x1ff, 0x4, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x5, 0x4, 0xc}, 0x48) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r7, 0x7120, 0xabf3, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) dup(r0) (async) shutdown(r3, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffbff, 0x7fffffff, 0x1ff, 0x4, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x5, 0x4, 0xc}, 0x48) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r7, 0x7120, 0xabf3, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) (async) 04:02:47 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:47 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:47 executing program 5: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x6e37, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) 04:02:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4f}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:47 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r2, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r2, 0x1) (async) 04:02:47 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r0, 0x8000000) syz_io_uring_setup(0x69ba, &(0x7f0000000180)={0x0, 0x2d82, 0x8, 0x1, 0x267}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xd12}}, './file0\x00'}) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r7, &(0x7f0000000280)={0x10000000}, r3, 0x3, 0x0, 0x1}, 0x9) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:47 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:48 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:48 executing program 5: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x6e37, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) 04:02:48 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4f}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r2, 0x1) 04:02:48 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x6373, &(0x7f0000000180)={0x0, 0x9008, 0x4, 0x2, 0x361, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000280)={0x8, 'macvtap0\x00', {}, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r6, 0x1) 04:02:48 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 32) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:48 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@rc={0x1f, @fixed}, 0x0, 0x80000, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4f}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4f}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:49 executing program 1: r0 = syz_io_uring_setup(0x6441, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000026c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libertas_tf', 0x8900, 0x0) shutdown(r7, 0x0) 04:02:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2e2f66696c653000a5c80cb8e6c5baf0cb202aa361e7c679155bc5eb29de09c65ffc782741a75f1d454f435054640a570900cbecc8a98badca4f4de0f0dbeb36bdf822cc6aceb4d9615c83feb9c6b8282cac0baaf2cfbb4e86926fdc64fd563d734cc1c135e4283082c2cd218097ad680ec549ccc14686a54821853e7d886d2278f8107dd25e0268ab605f924f1785346adc2072fd6dcd83cda352ad7dc387f9c42be0bf0e0afd59e53c0b8501389552ad5e349ac3a13e45e1ba5d1ed38aa76bf9869d62c7636d12a9cad14403d18e4f46f178731c44fd9340ea40ddd6c7cf7fd7c6b9d0c07a08000d9f"]) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5, r6, r7, r8, r9, r3], 0x6, 0x0, 0x1}, 0x8001) io_uring_enter(r5, 0x5c3a, 0x6e16, 0x5, &(0x7f0000000080)={[0x7f]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000180)={0x1, 0x401, 0x2, 0x0, 0x1, [{0xf5, 0x5, 0x1f, '\x00', 0x2800}]}) 04:02:49 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x6373, &(0x7f0000000180)={0x0, 0x9008, 0x4, 0x2, 0x361, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000280)={0x8, 'macvtap0\x00', {}, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r6, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x10010, r0, 0x8000000) (async) syz_io_uring_setup(0x6373, &(0x7f0000000180)={0x0, 0x9008, 0x4, 0x2, 0x361, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000280)={0x8, 'macvtap0\x00', {}, 0x4}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r6, 0x1) (async) 04:02:49 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x10010, r0, 0x8000000) (async) syz_io_uring_setup(0x6373, &(0x7f0000000180)={0x0, 0x9008, 0x4, 0x2, 0x361, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000280)={0x8, 'macvtap0\x00', {}, 0x4}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r6, 0x1) 04:02:49 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x40000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x2f25, 0x3814, 0x3, &(0x7f0000000080)={[0x7ff]}, 0x8) shutdown(r4, 0x1) 04:02:49 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) r6 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@rc={0x1f, @fixed}, 0x0, 0x80000, 0x0, {0x0, r5}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0xfffffffa) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:50 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2e2f66696c653000a5c80cb8e6c5baf0cb202aa361e7c679155bc5eb29de09c65ffc782741a75f1d454f435054640a570900cbecc8a98badca4f4de0f0dbeb36bdf822cc6aceb4d9615c83feb9c6b8282cac0baaf2cfbb4e86926fdc64fd563d734cc1c135e4283082c2cd218097ad680ec549ccc14686a54821853e7d886d2278f8107dd25e0268ab605f924f1785346adc2072fd6dcd83cda352ad7dc387f9c42be0bf0e0afd59e53c0b8501389552ad5e349ac3a13e45e1ba5d1ed38aa76bf9869d62c7636d12a9cad14403d18e4f46f178731c44fd9340ea40ddd6c7cf7fd7c6b9d0c07a08000d9f"]) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5, r6, r7, r8, r9, r3], 0x6, 0x0, 0x1}, 0x8001) (async) io_uring_enter(r5, 0x5c3a, 0x6e16, 0x5, &(0x7f0000000080)={[0x7f]}, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000180)={0x1, 0x401, 0x2, 0x0, 0x1, [{0xf5, 0x5, 0x1f, '\x00', 0x2800}]}) 04:02:50 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2e2f66696c653000a5c80cb8e6c5baf0cb202aa361e7c679155bc5eb29de09c65ffc782741a75f1d454f435054640a570900cbecc8a98badca4f4de0f0dbeb36bdf822cc6aceb4d9615c83feb9c6b8282cac0baaf2cfbb4e86926fdc64fd563d734cc1c135e4283082c2cd218097ad680ec549ccc14686a54821853e7d886d2278f8107dd25e0268ab605f924f1785346adc2072fd6dcd83cda352ad7dc387f9c42be0bf0e0afd59e53c0b8501389552ad5e349ac3a13e45e1ba5d1ed38aa76bf9869d62c7636d12a9cad14403d18e4f46f178731c44fd9340ea40ddd6c7cf7fd7c6b9d0c07a08000d9f"]) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5, r6, r7, r8, r9, r3], 0x6, 0x0, 0x1}, 0x8001) io_uring_enter(r5, 0x5c3a, 0x6e16, 0x5, &(0x7f0000000080)={[0x7f]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000180)={0x1, 0x401, 0x2, 0x0, 0x1, [{0xf5, 0x5, 0x1f, '\x00', 0x2800}]}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2e2f66696c653000a5c80cb8e6c5baf0cb202aa361e7c679155bc5eb29de09c65ffc782741a75f1d454f435054640a570900cbecc8a98badca4f4de0f0dbeb36bdf822cc6aceb4d9615c83feb9c6b8282cac0baaf2cfbb4e86926fdc64fd563d734cc1c135e4283082c2cd218097ad680ec549ccc14686a54821853e7d886d2278f8107dd25e0268ab605f924f1785346adc2072fd6dcd83cda352ad7dc387f9c42be0bf0e0afd59e53c0b8501389552ad5e349ac3a13e45e1ba5d1ed38aa76bf9869d62c7636d12a9cad14403d18e4f46f178731c44fd9340ea40ddd6c7cf7fd7c6b9d0c07a08000d9f"]) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5, r6, r7, r8, r9, r3], 0x6, 0x0, 0x1}, 0x8001) (async) io_uring_enter(r5, 0x5c3a, 0x6e16, 0x5, &(0x7f0000000080)={[0x7f]}, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000180)={0x1, 0x401, 0x2, 0x0, 0x1, [{0xf5, 0x5, 0x1f, '\x00', 0x2800}]}) (async) 04:02:50 executing program 1: r0 = syz_io_uring_setup(0x6441, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000026c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libertas_tf', 0x8900, 0x0) shutdown(r7, 0x0) syz_io_uring_setup(0x6441, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000026c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libertas_tf', 0x8900, 0x0) (async) shutdown(r7, 0x0) (async) 04:02:50 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:02:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x2309, &(0x7f0000000400)={0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x81, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x62) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r8, 0x1) 04:02:50 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x40000000, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r5, 0x2f25, 0x3814, 0x3, &(0x7f0000000080)={[0x7ff]}, 0x8) (async) shutdown(r4, 0x1) 04:02:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@rc={0x1f, @fixed}, 0x0, 0x80000, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@rc={0x1f, @fixed}, 0x0, 0x80000, 0x0, {0x0, r5}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:50 executing program 1: r0 = syz_io_uring_setup(0x6441, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000026c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libertas_tf', 0x8900, 0x0) shutdown(r7, 0x0) syz_io_uring_setup(0x6441, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000026c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libertas_tf', 0x8900, 0x0) (async) shutdown(r7, 0x0) (async) 04:02:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0xfffffffa) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:50 executing program 5: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) io_uring_enter(r6, 0x6a90, 0x2b14, 0x0, &(0x7f0000000100)={[0x10001]}, 0x8) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x436e, &(0x7f00000002c0)={0x0, 0xf1e2, 0x20, 0x3, 0x1fb}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5, 0x0, 0x27, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x436e, &(0x7f00000002c0)={0x0, 0xf1e2, 0x20, 0x3, 0x1fb}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x10000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5, 0x0, 0x27, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x436e, &(0x7f00000002c0)={0x0, 0xf1e2, 0x20, 0x3, 0x1fb}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x10000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5, 0x0, 0x27, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:51 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8004001}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8004001}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8004001}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:51 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r3 = syz_io_uring_setup(0x2309, &(0x7f0000000400)={0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x81, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x62) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r8, 0x1) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8004001}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8004001}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:51 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:02:51 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x40000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r5, 0x2f25, 0x3814, 0x3, &(0x7f0000000080)={[0x7ff]}, 0x8) shutdown(r4, 0x1) 04:02:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0xfffffffa) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:51 executing program 5: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) io_uring_enter(r6, 0x6a90, 0x2b14, 0x0, &(0x7f0000000100)={[0x10001]}, 0x8) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) fcntl$dupfd(r5, 0x0, r5) (async) io_uring_enter(r6, 0x6a90, 0x2b14, 0x0, &(0x7f0000000100)={[0x10001]}, 0x8) (async) 04:02:51 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) io_uring_enter(r3, 0x7385, 0x7145, 0x0, &(0x7f0000000180)={[0x2]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:02:51 executing program 5: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) r6 = fcntl$dupfd(r5, 0x0, r5) io_uring_enter(r6, 0x6a90, 0x2b14, 0x0, &(0x7f0000000100)={[0x10001]}, 0x8) 04:02:52 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x1}, 0x8c0a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080), 0x10) 04:02:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r3 = syz_io_uring_setup(0x2309, &(0x7f0000000400)={0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x81, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x62) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r8, 0x1) 04:02:52 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) r8 = perf_event_open$cgroup(&(0x7f0000000680)={0x4, 0x80, 0x8, 0x5, 0x1, 0x2, 0x0, 0x5, 0x20400, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x2, @perf_config_ext={0x10001, 0x3}, 0x4048, 0xffff, 0x7fff, 0x0, 0x0, 0x8, 0x12, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = getpgid(0xffffffffffffffff) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r12) r13 = getgid() sendmmsg$unix(r3, &(0x7f0000000780)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000340)="4d3fadf0c4a2eb0d7d2757b4e29be22e62c67aef25b605785eda50b9e6cba84c82845d68d8603aea5770fb44bd4709d78c70da4ab75211e62f1e01def6a2f8372c22f18607a027b9f9fb959223b8c974284f35576274b1bf6a82b51549d4c12cda6683c472874e9452fb6a3f410def3927e92c9b4e600400db792fe84fa10e5f41ebd83c28568a32b4b6ab71482eb1364fca5b4e7df1fd939c463415701ae66a16c28ef4aa498547a6f1", 0xaa}, {&(0x7f0000000400)="85d66b860d6364f247aa6eb0c53b98ce7ef84c1cbc4badb0dc680ca5d68edee0fd46674bb3586e1b5789c35179ea0cc249e5241fff5653f8e20716734e08289ad3b1ad8177a91f5423da16122483055c4b65ab1831a64072578f691020cdc13f7a0a42fa91900154cff9f50e4813205e6e49ac", 0x73}, {&(0x7f0000000480)="6acb11ecc27180a6bb879aa409a80682172e91896796621aee1378968f69fc4c3f480e8f8433f1e037c21fd27afaf944721eb408367f43c857d9a95e1296ae8db2e0d09629b77a0088734b3d6d8d3af8d2dbf8bbb870736d67ac0e90bcdd7997aa5fd659c92bbb393df24cfaf49c4d71da75bda83890e8516f233f67d2d3798e866aa46d22f8b3ddb2b6af5fc72574e0627f52b57ece4453d85be0978035585267368097f060", 0xa6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, r3, r5, r7, r3, r4, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x78, 0x24004080}}], 0x1, 0x48000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) io_uring_enter(r0, 0x48a4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:02:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) io_uring_enter(r3, 0x7385, 0x7145, 0x0, &(0x7f0000000180)={[0x2]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) 04:02:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r6, 0x19, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 04:02:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x1b87, 0x2d1e, 0x3, &(0x7f0000000080)={[0xffff]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x204000, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001800)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)="fea8ddd272f8ea769dbdf220bef4522864c8d534c51694f24aa28dfcf6b1fa7f832f1daaf94c8457f5dbbf45347afd64a8a01c6af4cb9f097ae83f0c2dabdbbbb9e81a748eca44f6943648cd011c9ab7014904b68390ed8c757c94fddc4277aa0a8c7d326e6d6af43942694ef4e7073ac9fbe8959407be0cf7d5b680ebc9b3381c", 0x81}, {&(0x7f0000000680)="2f3c332c1d8c7d0442822a08fadcf1cbad4eb490ade4b1cda2045534d00439904169c879150d1c4af0c1a2bdbe9e6c2d880b1328122b160e21d3f79851015772c64bd7b115eb45d83293e6be222e128ec0b3dec218e088ce2d9a31ae378b39b08bde81b75696c33d45d1ee65ccc2951c9f1e94d31e1f896fad587d7b708f5123a71d1964107643ef39344ee8a0f8333e4be01726b79438586a8b18404fb64dd8ce3a1b2eefa7ff90c40ec4ffc3a8bf2287818e729b690675576b83cc3b7521940e6867f93883d74b6dec7649a8a99638462fdf8ecc46b49ac8831eef6b2fc7654087dc2e04d1066ec45ecd7f1ac278ef64080cff66269f9ce2b02dcab560000643893593cb443680492a0e00526bd7542085726efb9dbba25a67184a3f3d3624a0a6b3b3319502ba9b7952ec436aa175dfcfd82af7a48d019e9a36c65508f5a147e5a14c38693c2bda8490920e18744244d9e21d94a3555bf22d4158afb0d89dfbda67f721151231b1cdb1e615e4bd91e40ff08570bc5226d14ef4fea29a42dafab447166f53d51f134443e075c31301a41aa67a8ff4aed68eaea00fbba853f61cf2256019df6959bf3be50da9364fb692ff552040fb284e43f95ea7f545915fdc57a1cbb1554eacb858fd3982d4c0febb1e62b78f548cb3975f6e75f2867c093030a67d4cbe67738e1aab82b741638c7cd47a26d091cdfc20bfdd50ae376d713ce96001db266cd316e014d66ad2cbf5d2e393af7c0a51642c25e6c7e86ddf651f647b06a4436bbdbff51f1a9344f3bab58d322830c592dffd13245c79c09c0fe24ac3126c61f382e9a6d400c13d9e89a806f29922efea27f48dbdad921b6fa37f780600a911a797dd1c363c35a17c86ecb06b14dcd3e3b435070282eb4e74fffaac8905938d0642e8730bb39d0ec8cae60edc59428561f6f20bdc94e1cc35da4d7bccbc66d4cde169746cc23dcd3613a9fbb53d41a1ad96f4f0ea1d98e2e7da9413b7abb704396d20325f2a698a62317d702bc0eb3bc4fc0435d36dc9d4f7681bd582732ed344c6e7e6470e6d25c4c7e948565d118416d1ffa75bfb39051a32c7980369ced022920be4bea1f86d59f4f3cb5bfb6ae19bc33e9aad504b8c66d95d3addcb335356bf50a26f8e717fa52595fef3484c58dd3340dde48a495ba9344291bb36f93634573eca923e1ff1b00118ee4a2a390bfdd63216708a61c244e113de99bede59703351038d1018696f8f28f1e6019d65b401fff66675796bc51c2c9f639ca9df8e7f2d87f345ec8cc354ced3d681aa218ea5dc1f3a61bc92af10b0875b15c37eb13b7b839eebad560f79b32f99605fbc30bf0fabcd1c73166b31ee10f2d75353d35f64a5d7ff015674cbea84982867092b0abc143101c5ac655ce6c4879a13c05ad84147164930dcd69c83c14f1267dda9d27488f503b6c11be1b90ea96f3d7bded60de4b4053288bcac321cb84465f71e668c698bb4e78acc354b95970d50b98e541b3cd32f240b8a22f8c0f26d20c006ee1fbf176114ed89d6553b7c3f06b3cb6c4eec609cccade82609bcb88bc8c73354171c1b41758c63edea78ef2550a5de14b647eddb5c2cb816c5a68e15c930bd9c5837ca767df8cf8ef4a4f78a45082273f61e10faba6d257ba95fc793613cbe8b9251e46c06899ca69e91e643e29da3774bb01ffc9f5a1c5816a2217d04ada5a5c9383030061cf98ef2ba2f437206530ddc45e702beef9c57e15925cfaa360809666628c34e76556e77748a2bb56e4b147ec7c7ce108d764b6bc21ec91f75b64de41edcf71666b723184f7db6e635be1346e04a33d0ecd4c5dc6e4cea11ea12d2c7f7024de8196350bfeac870499e653e98eb94f53e49bb4aa67755824815b59289efaa9d041c74a5f77b3320406486eed467cd8586d9b4731eac998dc41d85cb13a9e79aa2e7e0afbe0c26875bea593e38d6bd14afcf8056b945735a06ec681daf64973867c3051551a272c2691ff00e3ec8c63cf6221d658ce8ed44e3223c6251dba9595564a1680c6596c1ca9594fc562590035eb78ab495e8bc1f4ee073d58ebc3a80bee33c2f37b061ffd675e0f7a95748499a76ac227fd8bccda82608530443bb616d830cc9f645f6ceae38b536915aac154f12ca23424ef5344c43132733b8298361c09d26d3c6d8e147d0b131d182098a4e25df6a53b1b0dc7217f5cdbf13fdbe493c1ec3d5ce469f3ee44a76779ef704a35ce44ed558122f7974a82153c9ec59a1a4a6a10f2e116842a3eef7da9f38da7adab9f767478d9bfeea37fb76ca6a8346a2ba6e81c71bd708a2f392b0c8ae1a235e9312cc77518b7e7a50e6a8c48aa49e7c05cceb5053c413954084598393bc44f1e6fed5430f9282700e0fcd5529db2980f873a10827f3f8af8e8b4fb17875073d8aaa25c5f15e89fde9ab187166058fc2a5742c850e0cc42df52a1c7b9797ac77fa01d5c6c52a2f9411392f74cec5416a04a0c7776301d6cb99ff71153d75ce93feb629bed9570b6cc4488875c7b29eebb969b52891d8d2f0bb5fd853b4c8de7d19b4c9f443dd8fed767a6a02b310a647b4d22583f422e3c624d113a616bbaee693001cfb9ef0d547edb1dca062467af9ca5cc26084c79ec48926e81a98fde718f011642ef730def9f0d315b7974e4031fdd147e5fe74d0bcfd7edcc1fd3b701b6796ddcdb22dc21b74bb8ab216973386ae53fc94e79a29e3b9e9d13dbac8ed59c6ab4340d29cdac927c973032098d9b897dd7a096450f7095fe3769bdbb0b4def317203a96ec107d7aa234364c1a5ce7ed49b74b4c4c49e33b2281d68516d410185ebaa0e015f92c4ba48eb4b4fe5ab28c4ba447882f4a1fa35001f6b0c5e85fcf9188b4bb4624132eeadb1a6e93d970fb0b1bc080a3ed9f691a6e1879266929a04f527148dfb945c5491b13d373ab1aac50642af31a5270e51fd2b34b4d87526a34aae2509d48ec192914ce08843fbab08a4612ca4c288b7e7e0b88b5b159451d0daab794d10bb1ecbcdf119ef9bd853fc3d73c103f018f2ac2551f41e574209c5083f7c2708bc68abd92d97f47778ede3d65236df1110c91ec5981b6baf318d484ab0ec4610fd2040cb3be965b6d93fbd6da54a9153fc9c10269acde9a7292b0fe2508a4623a2f04d6aee01e21526e4d75df3b119f8e040f2a6be3506f78f0f9b9c108d7cbc79ac9e4e60b7a2392d9dc04ae0e65f3aa39b0a5282270f8f040b1628eb3da0b9f582e70a52bd1d945e1d3709ab0a8b3f6b39e7d9c539076d1641b20d10c1e09a0d74a828cd51e08e80e9dccd4607e0c0dae70e2c5b2ab80eaa61c82172a5523ae64a91593a0798db78bf331ab0de42668e1eb8a3e5244d7173e70d9491f6ad5b9ecd407f4d33b549d12aed2363b9066c1c611c51094da7c76d63909b81a1a9f2d780a95c40830e72d28f2c1d37719a537b0989d64a8952e2d0b8ffa3803144238ffbe6d8cbcc831b3be7596e430d6622598f9ed274bbb7d745da45f04d185870e309cd6b900fa1fcb7063f7e4237c751f38ade097ab1b8e3cba042a439169d3ba02bf9add817a84f62744f64ea9a301ae81839a21a0d4687d59851f4581aa40bdd20324a948ba49b1881e2b6bf303d214fe3ba50b81db86b738f8f3ab319cb8317155d3b3e96ded5dbeadd26c1d5968eddcf9cc5811ebf219016d586db57577395853fe9779b1053377f1c0c9a0599f4251b4ab0b446561ed871d7ce66754083a96ccc6a5ade51d47134a8b99c9c257742307421f6df9a57d3e6200447e1b49ac87102cd9e408859623279d33ac356c0f1398dc480f56b73a975c9da42415619151daac6c6c2cd4e8dd95d50d03503dceb67ec9f6426d2176d0cb1f4e7901e1141255d9ffc5457803b3217c9c1511871739f2f2f6fae66e4067c0e6eea694083ba9f53fb917f3931d1af8694eb0827ae04bef191b943b6d9dcbacef05120ab2d3b38d3758b8fc41fc782f5f74ef96ea097ed46dd087e32ddb6187443310553e0119d5e9862aa22ef405aed72fbdd02bbd419bc0b60458e6dd56786edb43e92002b6c0e0d7d2357dccf5051b66d2a820b1eafe7b210772a246e4d98074a4abf8f871c25ad6dd1dab43c0f7b82d8e1a4bbbd813691a3523b68163341b98b8d3622ebfa593183e76e1b41b0a3761c28a29f81c69d5df8464f22bb2a53ec789cfe4d0b9282c7dc19d0e432ec908ab884b7d437ddc18ffb043441259b7dff477d8092aa2bd729d32960b3424a3015bdee0c2a825d7656dd941bc4e3cbcd997b7b43eff21ceb7fb27e213973329945e074ccbb9d34759e74e45219ead15316d62f3bb7a9eb97cd5e3c5ee2b12629020db752f4bcda0b4821436719fa1d83431f977a41ba6558e6dcba7ae9d3f596b67b0857476aef96d95a1b9dfe8f930f16998918b2e7cdb794131894f0d214dc6177e4497a18550e281ac3bb3d752154b9d111365f2b50ea7c4db51242a650f45737876c0f73417cedbb263d5e33bb3a3e9c9474cbc11abc752882280752f36a039f120c03e288cfda503318fe2217378ecd73ac3824b1b004f9089976a1d736fde2128123584643470e3238a9661aaaf6fff908514104481c5e4ce8b575de451a8b6cf4d2d31e5dde096d713499625e87f77278c4ab851b14a755fd8df76daf085cc23c45197fe16c751de1daaf4d0cdb87369dd1d9380b3c514232efe33822334bda0c272f968b0be43053bbff732b00a21bd8a42a0a6a07ac88c3924c01d754a42818edd0e984b88533ae7165e254711fcb9c11e6beeb3848935d7f9e1637ea2ec1371d71d96f60d7d9f261aba1152d92231184b2fbda99a7dee372c07b2893a33fc1ce4c622de2fa7092d85b2a94255c9b678d9cc1e9df97de058da9213e360baf5048d58d162cbab6effd7ed9e11e422122276ff0863d0db81fd85e83dda4b94f7ecae80c73c08c233d07c439ee713891a2083f8de3b118d8e664b8d19d73e8a4b4b5d27795eb6e99b4fee8c787d097c19fe0dd2c5fd1b56778c2e54cd87ab09a01fa9b38e3035ae688b8a85b4a27954b0f47e7ac37bd86460224b74fc7b5604f1ac5bf9ac7f6309583687b613779a0cc7ca65306b05e2544f396063f88e8feae466af1a06137abb84db75e19ab42cff8180b0acc593726b67d11b40f2834f5dc8729565c4d502caaad3840f12d0e195a78d1091996bdad26bcb397d4b312e4f527ce5ece440bdd0ef8dd8043be483b2d817c3395590a9d655a66cdf1d10f3da3d2c26d239b43fb25cc9510a837d7bf145238168d1139455fa7c2124b4b69029bab3a8c7e18a100b8e58509a33daec5efae9a2bc278b185ae65e358b88125f8a4a12559bc7baee746372a2fe3102a185d6075d09eecce6d86a117f242db16e2a3c582799cf6b014ce65aada2cdb95ee6cd236bc5b4dec1bf46d2a9fef493c3a266e679e2ae335ffbeff683f6246c7be68905bd9f7a71643195b0936c07bb2e6a5af4fb4a0d4c9cba6898cf854b7805b6772e1e01cb5089d993645150d21f8050c3d318aec38ce5518812c6ec0eabf7b93be50616198ae925f9a9070732468e81571a87794258afdf0d2bc36b2d5553ebd9941d8c8c5e084a0a144ef67a86260440b6255c84dee4e3be6c0492262e0cac9b5c971486be3d748a56aab489266a8e631d41175ede90337b153633768dd8c24205e365717b08fe42ba5f03236e0ee87bdeb0c59b563222886c10decedddb160223df7338c037cecd3d04b6e191bc968a635f2e6bba7755d841fe1d3611d4804db35730fd9f46834a6b42eb7d18", 0x1000}, {&(0x7f0000000340)="7ca33202bda0f58fc21647e5081dddc3eade581ebfc1ed613a849dce62f6c632e72d36fe305b0081833c0ce91138486867c6c14829a3134696ed9c0df682a6d621e2ad3200fff1651ee906f24c743144414ddb2a9bf14673d486c36764afe86597deb2967d93425c805f1a7fcd53554bbc4af27e25acfe196e8ebbf9bc40385188ae249f071a8d267ff5e8aaa785a884f162ebeff7494bb5d9adf716768cd41f31c25cea8889e7470f66bd856bbb121c73aeda8339b0fcffb4928164a5dc2a3e28f1c7a52f4cf78b1bbf9be7a720e6ff3e18", 0xd2}, {&(0x7f0000000440)="2d88c8f44b2defc1b8194229f61927777394981e4888335d8202ba0bcb3142ff0f72d2f966b2d4c73b8e34f67b39ba0dabd5dc9b0576c66976483f7538cabd1b178753c54e", 0x45}, {&(0x7f00000004c0)="9367ef1885a6120c34245f0439b59f6fe8cdce8ff01c03e509c51101a869bd583b75a09000962c4a76896ef439ba566bdc4fc942e6978bf4c046c40e1cde99b6eedb17be24", 0x45}, {&(0x7f0000000540)="97e03cf7cbab2fe34b38ee23365824faae28f2efed67d6ad38ad4a4707583f1adf1497e8f3d933ff73b867708a7a7528e1adf177cfc8072bf7487b9ca02577d548d25e7bc6bba20e2fc8ba2547dbe6d4ae82914e16980313ec132ca3ecf1323219be27c220c0d7b890b6be5cb47e25ae79560bda113a210eab619c259a9ce33a29ebf4cd87725cfc6e", 0x89}, {&(0x7f0000001680)="3e7cd764ebfdeb43d3d1ae9dece520fb222a0fd3338b88092cdd40ac897d94175bedb5c20cee8f3b9e29e5d452f227f03ad421ef3d9ff363a41c7d355c958acf8bbe6749db016264ba1b465c0672302ebe5bd77a3be106101fdf7b92d88828f8c0fe3673cdc1f4b0dfb6d3a4c1afcb6d74e8542ce95009da5602e7b693b2c6f61643bbd177f81ac194990d26aa7e201b5a35897ffb30ac2efbd7780ef5a11410095081e22e26ab848501d0b5a64ad9491ebc7b751a46ccdb7ec2147b5c3c8ac878cac1681bbca7e43f2d2051f7955f98d7dd587a160b03f16896", 0xda}], 0x7, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r4, r8, r3, r9, r10, r11]}}], 0xa8, 0x8004}, 0x0) 04:02:53 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x1}, 0x8c0a) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080), 0x10) 04:02:53 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="cce67dd3301db32836d81c2553bc8f29d2ddaa5f2e63244f3c30023cca3a15d244386b382f74eb2f85e6a6154b15d163a2c7d1bf9a90533072c914ca7a877119415102cca7572d0316cd408b90fc1c88869790ad89ce64c1066de92a479cd26716ed824c917d383ae4166d1c1e9609c87f1637a262a5d6dbb10591bbf50df0ae0138ce6da758e61c6d6317bdb67a9cee543cdc58b6bcc340a898db45f6f88597adf4bead8930b9a5f8bc2888b8d67964e70b8958990e4f", 0xb7}, {&(0x7f0000000340)="0e357de00ac81b568ad9bcb1bb4c5025eede0ca2e2d7f4b3d54468ebefabc573e40c2a222dc12debf2449130013e3f06364637bcbdd13705cf1472a751fe2755c572060af1e08297867a13b0b2915ef2828ce88f51f0bb82e43d9afb534982857e745bd95f7a644cc5f4ac1ff015a05189d404fb4a1b107ed0198dd83cd2b798913c047843310223f5393da0", 0x8c}, {&(0x7f0000000400)="1d9be5e748b97a9ad055285c396b449c4692144c23cee07a4e00f2d647a3ea3dccfe2840a94f4257cd0ac706d74b0ff3d43315aaa4cccc385fc4e5ab57e1eeb5579c4f1dd6c478dc8967c84c5251a55a1173204cfda95cbc81f2b36f4ee5a5047d2ab0c575a387c37566e5b1c1164d552bd3ce145741021e8dfda04709ed5d103abc84e6a8e2806267521155cb6d7b6a0704bd2fade6b2e1f08b28b734bd6b763bc51c24eec6a53cb2d91571e5cefe635cf4159bb95d2ede18a70684e150bf5ace4dc754b3a263c1b82c5bbdb48787e5e7b644b431bb2c", 0xd7}], 0x3, 0x4, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700002000000089000000064b01002c0065000001299078e00000020a010101830feae00000017f000001e0000002009404000094040000"]}) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001600000828bd7000fcdbdf2502803200", @ANYRES32=r4, @ANYBLOB="1400030077673000000000000000000000000000080008004100000008000100ac1414bb1400030076657468666900"], 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff, 0xc7f, 0x2, 0x100, 0xfffffffffffffffb, 0x82c00040, r9}) socket(0x2c, 0x1, 0x2) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 04:02:53 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) r8 = perf_event_open$cgroup(&(0x7f0000000680)={0x4, 0x80, 0x8, 0x5, 0x1, 0x2, 0x0, 0x5, 0x20400, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x2, @perf_config_ext={0x10001, 0x3}, 0x4048, 0xffff, 0x7fff, 0x0, 0x0, 0x8, 0x12, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r10 = getpgid(0xffffffffffffffff) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r12) r13 = getgid() sendmmsg$unix(r3, &(0x7f0000000780)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000340)="4d3fadf0c4a2eb0d7d2757b4e29be22e62c67aef25b605785eda50b9e6cba84c82845d68d8603aea5770fb44bd4709d78c70da4ab75211e62f1e01def6a2f8372c22f18607a027b9f9fb959223b8c974284f35576274b1bf6a82b51549d4c12cda6683c472874e9452fb6a3f410def3927e92c9b4e600400db792fe84fa10e5f41ebd83c28568a32b4b6ab71482eb1364fca5b4e7df1fd939c463415701ae66a16c28ef4aa498547a6f1", 0xaa}, {&(0x7f0000000400)="85d66b860d6364f247aa6eb0c53b98ce7ef84c1cbc4badb0dc680ca5d68edee0fd46674bb3586e1b5789c35179ea0cc249e5241fff5653f8e20716734e08289ad3b1ad8177a91f5423da16122483055c4b65ab1831a64072578f691020cdc13f7a0a42fa91900154cff9f50e4813205e6e49ac", 0x73}, {&(0x7f0000000480)="6acb11ecc27180a6bb879aa409a80682172e91896796621aee1378968f69fc4c3f480e8f8433f1e037c21fd27afaf944721eb408367f43c857d9a95e1296ae8db2e0d09629b77a0088734b3d6d8d3af8d2dbf8bbb870736d67ac0e90bcdd7997aa5fd659c92bbb393df24cfaf49c4d71da75bda83890e8516f233f67d2d3798e866aa46d22f8b3ddb2b6af5fc72574e0627f52b57ece4453d85be0978035585267368097f060", 0xa6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, r3, r5, r7, r3, r4, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x78, 0x24004080}}], 0x1, 0x48000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) (async) io_uring_enter(r0, 0x48a4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:02:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) io_uring_enter(r3, 0x7385, 0x7145, 0x0, &(0x7f0000000180)={[0x2]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) 04:02:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r6, 0x19, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x34}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r6, 0x19, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) 04:02:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x1b87, 0x2d1e, 0x3, &(0x7f0000000080)={[0xffff]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x204000, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001800)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)="fea8ddd272f8ea769dbdf220bef4522864c8d534c51694f24aa28dfcf6b1fa7f832f1daaf94c8457f5dbbf45347afd64a8a01c6af4cb9f097ae83f0c2dabdbbbb9e81a748eca44f6943648cd011c9ab7014904b68390ed8c757c94fddc4277aa0a8c7d326e6d6af43942694ef4e7073ac9fbe8959407be0cf7d5b680ebc9b3381c", 0x81}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000340)="7ca33202bda0f58fc21647e5081dddc3eade581ebfc1ed613a849dce62f6c632e72d36fe305b0081833c0ce91138486867c6c14829a3134696ed9c0df682a6d621e2ad3200fff1651ee906f24c743144414ddb2a9bf14673d486c36764afe86597deb2967d93425c805f1a7fcd53554bbc4af27e25acfe196e8ebbf9bc40385188ae249f071a8d267ff5e8aaa785a884f162ebeff7494bb5d9adf716768cd41f31c25cea8889e7470f66bd856bbb121c73aeda8339b0fcffb4928164a5dc2a3e28f1c7a52f4cf78b1bbf9be7a720e6ff3e18", 0xd2}, {&(0x7f0000000440)="2d88c8f44b2defc1b8194229f61927777394981e4888335d8202ba0bcb3142ff0f72d2f966b2d4c73b8e34f67b39ba0dabd5dc9b0576c66976483f7538cabd1b178753c54e", 0x45}, {&(0x7f00000004c0)="9367ef1885a6120c34245f0439b59f6fe8cdce8ff01c03e509c51101a869bd583b75a09000962c4a76896ef439ba566bdc4fc942e6978bf4c046c40e1cde99b6eedb17be24", 0x45}, {&(0x7f0000000540)="97e03cf7cbab2fe34b38ee23365824faae28f2efed67d6ad38ad4a4707583f1adf1497e8f3d933ff73b867708a7a7528e1adf177cfc8072bf7487b9ca02577d548d25e7bc6bba20e2fc8ba2547dbe6d4ae82914e16980313ec132ca3ecf1323219be27c220c0d7b890b6be5cb47e25ae79560bda113a210eab619c259a9ce33a29ebf4cd87725cfc6e", 0x89}, {&(0x7f0000001680)="3e7cd764ebfdeb43d3d1ae9dece520fb222a0fd3338b88092cdd40ac897d94175bedb5c20cee8f3b9e29e5d452f227f03ad421ef3d9ff363a41c7d355c958acf8bbe6749db016264ba1b465c0672302ebe5bd77a3be106101fdf7b92d88828f8c0fe3673cdc1f4b0dfb6d3a4c1afcb6d74e8542ce95009da5602e7b693b2c6f61643bbd177f81ac194990d26aa7e201b5a35897ffb30ac2efbd7780ef5a11410095081e22e26ab848501d0b5a64ad9491ebc7b751a46ccdb7ec2147b5c3c8ac878cac1681bbca7e43f2d2051f7955f98d7dd587a160b03f16896", 0xda}], 0x7, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r4, r8, r3, r9, r10, r11]}}], 0xa8, 0x8004}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_enter(r0, 0x1b87, 0x2d1e, 0x3, &(0x7f0000000080)={[0xffff]}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r5) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x204000, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001800)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)="fea8ddd272f8ea769dbdf220bef4522864c8d534c51694f24aa28dfcf6b1fa7f832f1daaf94c8457f5dbbf45347afd64a8a01c6af4cb9f097ae83f0c2dabdbbbb9e81a748eca44f6943648cd011c9ab7014904b68390ed8c757c94fddc4277aa0a8c7d326e6d6af43942694ef4e7073ac9fbe8959407be0cf7d5b680ebc9b3381c", 0x81}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000340)="7ca33202bda0f58fc21647e5081dddc3eade581ebfc1ed613a849dce62f6c632e72d36fe305b0081833c0ce91138486867c6c14829a3134696ed9c0df682a6d621e2ad3200fff1651ee906f24c743144414ddb2a9bf14673d486c36764afe86597deb2967d93425c805f1a7fcd53554bbc4af27e25acfe196e8ebbf9bc40385188ae249f071a8d267ff5e8aaa785a884f162ebeff7494bb5d9adf716768cd41f31c25cea8889e7470f66bd856bbb121c73aeda8339b0fcffb4928164a5dc2a3e28f1c7a52f4cf78b1bbf9be7a720e6ff3e18", 0xd2}, {&(0x7f0000000440)="2d88c8f44b2defc1b8194229f61927777394981e4888335d8202ba0bcb3142ff0f72d2f966b2d4c73b8e34f67b39ba0dabd5dc9b0576c66976483f7538cabd1b178753c54e", 0x45}, {&(0x7f00000004c0)="9367ef1885a6120c34245f0439b59f6fe8cdce8ff01c03e509c51101a869bd583b75a09000962c4a76896ef439ba566bdc4fc942e6978bf4c046c40e1cde99b6eedb17be24", 0x45}, {&(0x7f0000000540)="97e03cf7cbab2fe34b38ee23365824faae28f2efed67d6ad38ad4a4707583f1adf1497e8f3d933ff73b867708a7a7528e1adf177cfc8072bf7487b9ca02577d548d25e7bc6bba20e2fc8ba2547dbe6d4ae82914e16980313ec132ca3ecf1323219be27c220c0d7b890b6be5cb47e25ae79560bda113a210eab619c259a9ce33a29ebf4cd87725cfc6e", 0x89}, {&(0x7f0000001680)="3e7cd764ebfdeb43d3d1ae9dece520fb222a0fd3338b88092cdd40ac897d94175bedb5c20cee8f3b9e29e5d452f227f03ad421ef3d9ff363a41c7d355c958acf8bbe6749db016264ba1b465c0672302ebe5bd77a3be106101fdf7b92d88828f8c0fe3673cdc1f4b0dfb6d3a4c1afcb6d74e8542ce95009da5602e7b693b2c6f61643bbd177f81ac194990d26aa7e201b5a35897ffb30ac2efbd7780ef5a11410095081e22e26ab848501d0b5a64ad9491ebc7b751a46ccdb7ec2147b5c3c8ac878cac1681bbca7e43f2d2051f7955f98d7dd587a160b03f16896", 0xda}], 0x7, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r4, r8, r3, r9, r10, r11]}}], 0xa8, 0x8004}, 0x0) (async) 04:02:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r6, 0x19, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 04:02:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x1b87, 0x2d1e, 0x3, &(0x7f0000000080)={[0xffff]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x204000, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001800)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)="fea8ddd272f8ea769dbdf220bef4522864c8d534c51694f24aa28dfcf6b1fa7f832f1daaf94c8457f5dbbf45347afd64a8a01c6af4cb9f097ae83f0c2dabdbbbb9e81a748eca44f6943648cd011c9ab7014904b68390ed8c757c94fddc4277aa0a8c7d326e6d6af43942694ef4e7073ac9fbe8959407be0cf7d5b680ebc9b3381c", 0x81}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000340)="7ca33202bda0f58fc21647e5081dddc3eade581ebfc1ed613a849dce62f6c632e72d36fe305b0081833c0ce91138486867c6c14829a3134696ed9c0df682a6d621e2ad3200fff1651ee906f24c743144414ddb2a9bf14673d486c36764afe86597deb2967d93425c805f1a7fcd53554bbc4af27e25acfe196e8ebbf9bc40385188ae249f071a8d267ff5e8aaa785a884f162ebeff7494bb5d9adf716768cd41f31c25cea8889e7470f66bd856bbb121c73aeda8339b0fcffb4928164a5dc2a3e28f1c7a52f4cf78b1bbf9be7a720e6ff3e18", 0xd2}, {&(0x7f0000000440)="2d88c8f44b2defc1b8194229f61927777394981e4888335d8202ba0bcb3142ff0f72d2f966b2d4c73b8e34f67b39ba0dabd5dc9b0576c66976483f7538cabd1b178753c54e", 0x45}, {&(0x7f00000004c0)="9367ef1885a6120c34245f0439b59f6fe8cdce8ff01c03e509c51101a869bd583b75a09000962c4a76896ef439ba566bdc4fc942e6978bf4c046c40e1cde99b6eedb17be24", 0x45}, {&(0x7f0000000540)="97e03cf7cbab2fe34b38ee23365824faae28f2efed67d6ad38ad4a4707583f1adf1497e8f3d933ff73b867708a7a7528e1adf177cfc8072bf7487b9ca02577d548d25e7bc6bba20e2fc8ba2547dbe6d4ae82914e16980313ec132ca3ecf1323219be27c220c0d7b890b6be5cb47e25ae79560bda113a210eab619c259a9ce33a29ebf4cd87725cfc6e", 0x89}, {&(0x7f0000001680)="3e7cd764ebfdeb43d3d1ae9dece520fb222a0fd3338b88092cdd40ac897d94175bedb5c20cee8f3b9e29e5d452f227f03ad421ef3d9ff363a41c7d355c958acf8bbe6749db016264ba1b465c0672302ebe5bd77a3be106101fdf7b92d88828f8c0fe3673cdc1f4b0dfb6d3a4c1afcb6d74e8542ce95009da5602e7b693b2c6f61643bbd177f81ac194990d26aa7e201b5a35897ffb30ac2efbd7780ef5a11410095081e22e26ab848501d0b5a64ad9491ebc7b751a46ccdb7ec2147b5c3c8ac878cac1681bbca7e43f2d2051f7955f98d7dd587a160b03f16896", 0xda}], 0x7, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r4, r8, r3, r9, r10, r11]}}], 0xa8, 0x8004}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_enter(r0, 0x1b87, 0x2d1e, 0x3, &(0x7f0000000080)={[0xffff]}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r5) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x204000, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001800)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)="fea8ddd272f8ea769dbdf220bef4522864c8d534c51694f24aa28dfcf6b1fa7f832f1daaf94c8457f5dbbf45347afd64a8a01c6af4cb9f097ae83f0c2dabdbbbb9e81a748eca44f6943648cd011c9ab7014904b68390ed8c757c94fddc4277aa0a8c7d326e6d6af43942694ef4e7073ac9fbe8959407be0cf7d5b680ebc9b3381c", 0x81}, {&(0x7f0000000680)="2f3c332c1d8c7d0442822a08fadcf1cbad4eb490ade4b1cda2045534d00439904169c879150d1c4af0c1a2bdbe9e6c2d880b1328122b160e21d3f79851015772c64bd7b115eb45d83293e6be222e128ec0b3dec218e088ce2d9a31ae378b39b08bde81b75696c33d45d1ee65ccc2951c9f1e94d31e1f896fad587d7b708f5123a71d1964107643ef39344ee8a0f8333e4be01726b79438586a8b18404fb64dd8ce3a1b2eefa7ff90c40ec4ffc3a8bf2287818e729b690675576b83cc3b7521940e6867f93883d74b6dec7649a8a99638462fdf8ecc46b49ac8831eef6b2fc7654087dc2e04d1066ec45ecd7f1ac278ef64080cff66269f9ce2b02dcab560000643893593cb443680492a0e00526bd7542085726efb9dbba25a67184a3f3d3624a0a6b3b3319502ba9b7952ec436aa175dfcfd82af7a48d019e9a36c65508f5a147e5a14c38693c2bda8490920e18744244d9e21d94a3555bf22d4158afb0d89dfbda67f721151231b1cdb1e615e4bd91e40ff08570bc5226d14ef4fea29a42dafab447166f53d51f134443e075c31301a41aa67a8ff4aed68eaea00fbba853f61cf2256019df6959bf3be50da9364fb692ff552040fb284e43f95ea7f545915fdc57a1cbb1554eacb858fd3982d4c0febb1e62b78f548cb3975f6e75f2867c093030a67d4cbe67738e1aab82b741638c7cd47a26d091cdfc20bfdd50ae376d713ce96001db266cd316e014d66ad2cbf5d2e393af7c0a51642c25e6c7e86ddf651f647b06a4436bbdbff51f1a9344f3bab58d322830c592dffd13245c79c09c0fe24ac3126c61f382e9a6d400c13d9e89a806f29922efea27f48dbdad921b6fa37f780600a911a797dd1c363c35a17c86ecb06b14dcd3e3b435070282eb4e74fffaac8905938d0642e8730bb39d0ec8cae60edc59428561f6f20bdc94e1cc35da4d7bccbc66d4cde169746cc23dcd3613a9fbb53d41a1ad96f4f0ea1d98e2e7da9413b7abb704396d20325f2a698a62317d702bc0eb3bc4fc0435d36dc9d4f7681bd582732ed344c6e7e6470e6d25c4c7e948565d118416d1ffa75bfb39051a32c7980369ced022920be4bea1f86d59f4f3cb5bfb6ae19bc33e9aad504b8c66d95d3addcb335356bf50a26f8e717fa52595fef3484c58dd3340dde48a495ba9344291bb36f93634573eca923e1ff1b00118ee4a2a390bfdd63216708a61c244e113de99bede59703351038d1018696f8f28f1e6019d65b401fff66675796bc51c2c9f639ca9df8e7f2d87f345ec8cc354ced3d681aa218ea5dc1f3a61bc92af10b0875b15c37eb13b7b839eebad560f79b32f99605fbc30bf0fabcd1c73166b31ee10f2d75353d35f64a5d7ff015674cbea84982867092b0abc143101c5ac655ce6c4879a13c05ad84147164930dcd69c83c14f1267dda9d27488f503b6c11be1b90ea96f3d7bded60de4b4053288bcac321cb84465f71e668c698bb4e78acc354b95970d50b98e541b3cd32f240b8a22f8c0f26d20c006ee1fbf176114ed89d6553b7c3f06b3cb6c4eec609cccade82609bcb88bc8c73354171c1b41758c63edea78ef2550a5de14b647eddb5c2cb816c5a68e15c930bd9c5837ca767df8cf8ef4a4f78a45082273f61e10faba6d257ba95fc793613cbe8b9251e46c06899ca69e91e643e29da3774bb01ffc9f5a1c5816a2217d04ada5a5c9383030061cf98ef2ba2f437206530ddc45e702beef9c57e15925cfaa360809666628c34e76556e77748a2bb56e4b147ec7c7ce108d764b6bc21ec91f75b64de41edcf71666b723184f7db6e635be1346e04a33d0ecd4c5dc6e4cea11ea12d2c7f7024de8196350bfeac870499e653e98eb94f53e49bb4aa67755824815b59289efaa9d041c74a5f77b3320406486eed467cd8586d9b4731eac998dc41d85cb13a9e79aa2e7e0afbe0c26875bea593e38d6bd14afcf8056b945735a06ec681daf64973867c3051551a272c2691ff00e3ec8c63cf6221d658ce8ed44e3223c6251dba9595564a1680c6596c1ca9594fc562590035eb78ab495e8bc1f4ee073d58ebc3a80bee33c2f37b061ffd675e0f7a95748499a76ac227fd8bccda82608530443bb616d830cc9f645f6ceae38b536915aac154f12ca23424ef5344c43132733b8298361c09d26d3c6d8e147d0b131d182098a4e25df6a53b1b0dc7217f5cdbf13fdbe493c1ec3d5ce469f3ee44a76779ef704a35ce44ed558122f7974a82153c9ec59a1a4a6a10f2e116842a3eef7da9f38da7adab9f767478d9bfeea37fb76ca6a8346a2ba6e81c71bd708a2f392b0c8ae1a235e9312cc77518b7e7a50e6a8c48aa49e7c05cceb5053c413954084598393bc44f1e6fed5430f9282700e0fcd5529db2980f873a10827f3f8af8e8b4fb17875073d8aaa25c5f15e89fde9ab187166058fc2a5742c850e0cc42df52a1c7b9797ac77fa01d5c6c52a2f9411392f74cec5416a04a0c7776301d6cb99ff71153d75ce93feb629bed9570b6cc4488875c7b29eebb969b52891d8d2f0bb5fd853b4c8de7d19b4c9f443dd8fed767a6a02b310a647b4d22583f422e3c624d113a616bbaee693001cfb9ef0d547edb1dca062467af9ca5cc26084c79ec48926e81a98fde718f011642ef730def9f0d315b7974e4031fdd147e5fe74d0bcfd7edcc1fd3b701b6796ddcdb22dc21b74bb8ab216973386ae53fc94e79a29e3b9e9d13dbac8ed59c6ab4340d29cdac927c973032098d9b897dd7a096450f7095fe3769bdbb0b4def317203a96ec107d7aa234364c1a5ce7ed49b74b4c4c49e33b2281d68516d410185ebaa0e015f92c4ba48eb4b4fe5ab28c4ba447882f4a1fa35001f6b0c5e85fcf9188b4bb4624132eeadb1a6e93d970fb0b1bc080a3ed9f691a6e1879266929a04f527148dfb945c5491b13d373ab1aac50642af31a5270e51fd2b34b4d87526a34aae2509d48ec192914ce08843fbab08a4612ca4c288b7e7e0b88b5b159451d0daab794d10bb1ecbcdf119ef9bd853fc3d73c103f018f2ac2551f41e574209c5083f7c2708bc68abd92d97f47778ede3d65236df1110c91ec5981b6baf318d484ab0ec4610fd2040cb3be965b6d93fbd6da54a9153fc9c10269acde9a7292b0fe2508a4623a2f04d6aee01e21526e4d75df3b119f8e040f2a6be3506f78f0f9b9c108d7cbc79ac9e4e60b7a2392d9dc04ae0e65f3aa39b0a5282270f8f040b1628eb3da0b9f582e70a52bd1d945e1d3709ab0a8b3f6b39e7d9c539076d1641b20d10c1e09a0d74a828cd51e08e80e9dccd4607e0c0dae70e2c5b2ab80eaa61c82172a5523ae64a91593a0798db78bf331ab0de42668e1eb8a3e5244d7173e70d9491f6ad5b9ecd407f4d33b549d12aed2363b9066c1c611c51094da7c76d63909b81a1a9f2d780a95c40830e72d28f2c1d37719a537b0989d64a8952e2d0b8ffa3803144238ffbe6d8cbcc831b3be7596e430d6622598f9ed274bbb7d745da45f04d185870e309cd6b900fa1fcb7063f7e4237c751f38ade097ab1b8e3cba042a439169d3ba02bf9add817a84f62744f64ea9a301ae81839a21a0d4687d59851f4581aa40bdd20324a948ba49b1881e2b6bf303d214fe3ba50b81db86b738f8f3ab319cb8317155d3b3e96ded5dbeadd26c1d5968eddcf9cc5811ebf219016d586db57577395853fe9779b1053377f1c0c9a0599f4251b4ab0b446561ed871d7ce66754083a96ccc6a5ade51d47134a8b99c9c257742307421f6df9a57d3e6200447e1b49ac87102cd9e408859623279d33ac356c0f1398dc480f56b73a975c9da42415619151daac6c6c2cd4e8dd95d50d03503dceb67ec9f6426d2176d0cb1f4e7901e1141255d9ffc5457803b3217c9c1511871739f2f2f6fae66e4067c0e6eea694083ba9f53fb917f3931d1af8694eb0827ae04bef191b943b6d9dcbacef05120ab2d3b38d3758b8fc41fc782f5f74ef96ea097ed46dd087e32ddb6187443310553e0119d5e9862aa22ef405aed72fbdd02bbd419bc0b60458e6dd56786edb43e92002b6c0e0d7d2357dccf5051b66d2a820b1eafe7b210772a246e4d98074a4abf8f871c25ad6dd1dab43c0f7b82d8e1a4bbbd813691a3523b68163341b98b8d3622ebfa593183e76e1b41b0a3761c28a29f81c69d5df8464f22bb2a53ec789cfe4d0b9282c7dc19d0e432ec908ab884b7d437ddc18ffb043441259b7dff477d8092aa2bd729d32960b3424a3015bdee0c2a825d7656dd941bc4e3cbcd997b7b43eff21ceb7fb27e213973329945e074ccbb9d34759e74e45219ead15316d62f3bb7a9eb97cd5e3c5ee2b12629020db752f4bcda0b4821436719fa1d83431f977a41ba6558e6dcba7ae9d3f596b67b0857476aef96d95a1b9dfe8f930f16998918b2e7cdb794131894f0d214dc6177e4497a18550e281ac3bb3d752154b9d111365f2b50ea7c4db51242a650f45737876c0f73417cedbb263d5e33bb3a3e9c9474cbc11abc752882280752f36a039f120c03e288cfda503318fe2217378ecd73ac3824b1b004f9089976a1d736fde2128123584643470e3238a9661aaaf6fff908514104481c5e4ce8b575de451a8b6cf4d2d31e5dde096d713499625e87f77278c4ab851b14a755fd8df76daf085cc23c45197fe16c751de1daaf4d0cdb87369dd1d9380b3c514232efe33822334bda0c272f968b0be43053bbff732b00a21bd8a42a0a6a07ac88c3924c01d754a42818edd0e984b88533ae7165e254711fcb9c11e6beeb3848935d7f9e1637ea2ec1371d71d96f60d7d9f261aba1152d92231184b2fbda99a7dee372c07b2893a33fc1ce4c622de2fa7092d85b2a94255c9b678d9cc1e9df97de058da9213e360baf5048d58d162cbab6effd7ed9e11e422122276ff0863d0db81fd85e83dda4b94f7ecae80c73c08c233d07c439ee713891a2083f8de3b118d8e664b8d19d73e8a4b4b5d27795eb6e99b4fee8c787d097c19fe0dd2c5fd1b56778c2e54cd87ab09a01fa9b38e3035ae688b8a85b4a27954b0f47e7ac37bd86460224b74fc7b5604f1ac5bf9ac7f6309583687b613779a0cc7ca65306b05e2544f396063f88e8feae466af1a06137abb84db75e19ab42cff8180b0acc593726b67d11b40f2834f5dc8729565c4d502caaad3840f12d0e195a78d1091996bdad26bcb397d4b312e4f527ce5ece440bdd0ef8dd8043be483b2d817c3395590a9d655a66cdf1d10f3da3d2c26d239b43fb25cc9510a837d7bf145238168d1139455fa7c2124b4b69029bab3a8c7e18a100b8e58509a33daec5efae9a2bc278b185ae65e358b88125f8a4a12559bc7baee746372a2fe3102a185d6075d09eecce6d86a117f242db16e2a3c582799cf6b014ce65aada2cdb95ee6cd236bc5b4dec1bf46d2a9fef493c3a266e679e2ae335ffbeff683f6246c7be68905bd9f7a71643195b0936c07bb2e6a5af4fb4a0d4c9cba6898cf854b7805b6772e1e01cb5089d993645150d21f8050c3d318aec38ce5518812c6ec0eabf7b93be50616198ae925f9a9070732468e81571a87794258afdf0d2bc36b2d5553ebd9941d8c8c5e084a0a144ef67a86260440b6255c84dee4e3be6c0492262e0cac9b5c971486be3d748a56aab489266a8e631d41175ede90337b153633768dd8c24205e365717b08fe42ba5f03236e0ee87bdeb0c59b563222886c10decedddb160223df7338c037cecd3d04b6e191bc968a635f2e6bba7755d841fe1d3611d4804db35730fd9f46834a6b42eb7d18", 0x1000}, {&(0x7f0000000340)="7ca33202bda0f58fc21647e5081dddc3eade581ebfc1ed613a849dce62f6c632e72d36fe305b0081833c0ce91138486867c6c14829a3134696ed9c0df682a6d621e2ad3200fff1651ee906f24c743144414ddb2a9bf14673d486c36764afe86597deb2967d93425c805f1a7fcd53554bbc4af27e25acfe196e8ebbf9bc40385188ae249f071a8d267ff5e8aaa785a884f162ebeff7494bb5d9adf716768cd41f31c25cea8889e7470f66bd856bbb121c73aeda8339b0fcffb4928164a5dc2a3e28f1c7a52f4cf78b1bbf9be7a720e6ff3e18", 0xd2}, {&(0x7f0000000440)="2d88c8f44b2defc1b8194229f61927777394981e4888335d8202ba0bcb3142ff0f72d2f966b2d4c73b8e34f67b39ba0dabd5dc9b0576c66976483f7538cabd1b178753c54e", 0x45}, {&(0x7f00000004c0)="9367ef1885a6120c34245f0439b59f6fe8cdce8ff01c03e509c51101a869bd583b75a09000962c4a76896ef439ba566bdc4fc942e6978bf4c046c40e1cde99b6eedb17be24", 0x45}, {&(0x7f0000000540)="97e03cf7cbab2fe34b38ee23365824faae28f2efed67d6ad38ad4a4707583f1adf1497e8f3d933ff73b867708a7a7528e1adf177cfc8072bf7487b9ca02577d548d25e7bc6bba20e2fc8ba2547dbe6d4ae82914e16980313ec132ca3ecf1323219be27c220c0d7b890b6be5cb47e25ae79560bda113a210eab619c259a9ce33a29ebf4cd87725cfc6e", 0x89}, {&(0x7f0000001680)="3e7cd764ebfdeb43d3d1ae9dece520fb222a0fd3338b88092cdd40ac897d94175bedb5c20cee8f3b9e29e5d452f227f03ad421ef3d9ff363a41c7d355c958acf8bbe6749db016264ba1b465c0672302ebe5bd77a3be106101fdf7b92d88828f8c0fe3673cdc1f4b0dfb6d3a4c1afcb6d74e8542ce95009da5602e7b693b2c6f61643bbd177f81ac194990d26aa7e201b5a35897ffb30ac2efbd7780ef5a11410095081e22e26ab848501d0b5a64ad9491ebc7b751a46ccdb7ec2147b5c3c8ac878cac1681bbca7e43f2d2051f7955f98d7dd587a160b03f16896", 0xda}], 0x7, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r4, r8, r3, r9, r10, r11]}}], 0xa8, 0x8004}, 0x0) (async) 04:02:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:54 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="cce67dd3301db32836d81c2553bc8f29d2ddaa5f2e63244f3c30023cca3a15d244386b382f74eb2f85e6a6154b15d163a2c7d1bf9a90533072c914ca7a877119415102cca7572d0316cd408b90fc1c88869790ad89ce64c1066de92a479cd26716ed824c917d383ae4166d1c1e9609c87f1637a262a5d6dbb10591bbf50df0ae0138ce6da758e61c6d6317bdb67a9cee543cdc58b6bcc340a898db45f6f88597adf4bead8930b9a5f8bc2888b8d67964e70b8958990e4f", 0xb7}, {&(0x7f0000000340)="0e357de00ac81b568ad9bcb1bb4c5025eede0ca2e2d7f4b3d54468ebefabc573e40c2a222dc12debf2449130013e3f06364637bcbdd13705cf1472a751fe2755c572060af1e08297867a13b0b2915ef2828ce88f51f0bb82e43d9afb534982857e745bd95f7a644cc5f4ac1ff015a05189d404fb4a1b107ed0198dd83cd2b798913c047843310223f5393da0", 0x8c}, {&(0x7f0000000400)="1d9be5e748b97a9ad055285c396b449c4692144c23cee07a4e00f2d647a3ea3dccfe2840a94f4257cd0ac706d74b0ff3d43315aaa4cccc385fc4e5ab57e1eeb5579c4f1dd6c478dc8967c84c5251a55a1173204cfda95cbc81f2b36f4ee5a5047d2ab0c575a387c37566e5b1c1164d552bd3ce145741021e8dfda04709ed5d103abc84e6a8e2806267521155cb6d7b6a0704bd2fade6b2e1f08b28b734bd6b763bc51c24eec6a53cb2d91571e5cefe635cf4159bb95d2ede18a70684e150bf5ace4dc754b3a263c1b82c5bbdb48787e5e7b644b431bb2c", 0xd7}], 0x3, 0x4, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700002000000089000000064b01002c0065000001299078e00000020a010101830feae00000017f000001e0000002009404000094040000"]}) (async) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001600000828bd7000fcdbdf2502803200", @ANYRES32=r4, @ANYBLOB="1400030077673000000000000000000000000000080008004100000008000100ac1414bb1400030076657468666900"], 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x800) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff, 0xc7f, 0x2, 0x100, 0xfffffffffffffffb, 0x82c00040, r9}) socket(0x2c, 0x1, 0x2) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 04:02:54 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x1}, 0x8c0a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080), 0x10) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x3, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x1}, 0x8c0a) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) (async) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080), 0x10) (async) 04:02:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) r8 = perf_event_open$cgroup(&(0x7f0000000680)={0x4, 0x80, 0x8, 0x5, 0x1, 0x2, 0x0, 0x5, 0x20400, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x2, @perf_config_ext={0x10001, 0x3}, 0x4048, 0xffff, 0x7fff, 0x0, 0x0, 0x8, 0x12, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = getpgid(0xffffffffffffffff) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r12) r13 = getgid() sendmmsg$unix(r3, &(0x7f0000000780)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000340)="4d3fadf0c4a2eb0d7d2757b4e29be22e62c67aef25b605785eda50b9e6cba84c82845d68d8603aea5770fb44bd4709d78c70da4ab75211e62f1e01def6a2f8372c22f18607a027b9f9fb959223b8c974284f35576274b1bf6a82b51549d4c12cda6683c472874e9452fb6a3f410def3927e92c9b4e600400db792fe84fa10e5f41ebd83c28568a32b4b6ab71482eb1364fca5b4e7df1fd939c463415701ae66a16c28ef4aa498547a6f1", 0xaa}, {&(0x7f0000000400)="85d66b860d6364f247aa6eb0c53b98ce7ef84c1cbc4badb0dc680ca5d68edee0fd46674bb3586e1b5789c35179ea0cc249e5241fff5653f8e20716734e08289ad3b1ad8177a91f5423da16122483055c4b65ab1831a64072578f691020cdc13f7a0a42fa91900154cff9f50e4813205e6e49ac", 0x73}, {&(0x7f0000000480)="6acb11ecc27180a6bb879aa409a80682172e91896796621aee1378968f69fc4c3f480e8f8433f1e037c21fd27afaf944721eb408367f43c857d9a95e1296ae8db2e0d09629b77a0088734b3d6d8d3af8d2dbf8bbb870736d67ac0e90bcdd7997aa5fd659c92bbb393df24cfaf49c4d71da75bda83890e8516f233f67d2d3798e866aa46d22f8b3ddb2b6af5fc72574e0627f52b57ece4453d85be0978035585267368097f060", 0xa6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, r3, r5, r7, r3, r4, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x78, 0x24004080}}], 0x1, 0x48000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) io_uring_enter(r0, 0x48a4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000680)={0x4, 0x80, 0x8, 0x5, 0x1, 0x2, 0x0, 0x5, 0x20400, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x2, @perf_config_ext={0x10001, 0x3}, 0x4048, 0xffff, 0x7fff, 0x0, 0x0, 0x8, 0x12, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) getpgid(0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r12) (async) getgid() (async) sendmmsg$unix(r3, &(0x7f0000000780)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000340)="4d3fadf0c4a2eb0d7d2757b4e29be22e62c67aef25b605785eda50b9e6cba84c82845d68d8603aea5770fb44bd4709d78c70da4ab75211e62f1e01def6a2f8372c22f18607a027b9f9fb959223b8c974284f35576274b1bf6a82b51549d4c12cda6683c472874e9452fb6a3f410def3927e92c9b4e600400db792fe84fa10e5f41ebd83c28568a32b4b6ab71482eb1364fca5b4e7df1fd939c463415701ae66a16c28ef4aa498547a6f1", 0xaa}, {&(0x7f0000000400)="85d66b860d6364f247aa6eb0c53b98ce7ef84c1cbc4badb0dc680ca5d68edee0fd46674bb3586e1b5789c35179ea0cc249e5241fff5653f8e20716734e08289ad3b1ad8177a91f5423da16122483055c4b65ab1831a64072578f691020cdc13f7a0a42fa91900154cff9f50e4813205e6e49ac", 0x73}, {&(0x7f0000000480)="6acb11ecc27180a6bb879aa409a80682172e91896796621aee1378968f69fc4c3f480e8f8433f1e037c21fd27afaf944721eb408367f43c857d9a95e1296ae8db2e0d09629b77a0088734b3d6d8d3af8d2dbf8bbb870736d67ac0e90bcdd7997aa5fd659c92bbb393df24cfaf49c4d71da75bda83890e8516f233f67d2d3798e866aa46d22f8b3ddb2b6af5fc72574e0627f52b57ece4453d85be0978035585267368097f060", 0xa6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, r3, r5, r7, r3, r4, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x78, 0x24004080}}], 0x1, 0x48000) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) (async) io_uring_enter(r0, 0x48a4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) 04:02:54 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:54 executing program 4: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001bc0)=""/34) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)="3a5eb3cc6f6e8657905aed081a7a6769b43e632c398337a2e4661adf86be33d86832c42129e4a8d18c5686df643a0ad6cdaec84f326362c59437106dec6881f5dbb61670ad7aa32effc115932005dfd4618b91e5852c8e0ac7c0a5eb39cacb2ea7cbc531aada15a8e4abdbf611d4c2e13a5f22c053a3ad98f755a73a6a74c6df4bcb1bd449ef09605586", 0x8a}, {&(0x7f0000000400)="1ca07304d1541a68032d7cfb5861cd325187499fb66dd7323122ec2eaf83af69ead6fbb41a6210aff3aafe2097d7fab924a322024c4e0bb6b173bac8f82c79126fbac1706aa60b3ca177701dc9c93f2ba687f634ce4afe2863c2d7bd6b142120886a0e4d97c506488042fb9b94146a7980119203e469220b520ab17aec8a3c71009d57962be2ca0e58ab6e9bfb1263e2ad4742f596112afce27181209e3d3b3552ca21b0fdd23f93c77a78b8b3d7608bde52b4b9b7c4aa6334c490cb8e165233d8c0e15b84bdbb4389c61964b7094f64f4b877541c4b40c6dc061c6d960ddc15d18e15a02436", 0xe6}, {&(0x7f0000000500)="d3bc1773bf804516f897706d33186bc0670b5f71ce758f185494219ef669c53d4b5d411f098acdf2af1309b91e1ded803e883913d51ef688cbc53f0170f4e4a8f86de1ac5498468c109e95e0c5b558101e743c997d5e3a4db3bd822857ed12a43079da52f20885e62ffa3623b27eb6f2b8c55448f370867e2424942f61a9ca0becb0303dd756d32eac8eebe2956717a1ba46760ab920dab3fab2fe610b21a8ca94f0ed31dbe3ca29a21da12d0119c9cf2f95b61218681e1fba132e529ecf54da8273d4c3ba61d6c81f28b01bf8589679ecd4379ac2b50563", 0xd8}, {&(0x7f0000000240)="ed15a2e4c7c1c6ab6c86d151b062fa3f0f512d29c9e0567352bf24c9cb5d6cb5b84885c3fe7fea828875949a48a9f647644560ad32a960139e5223bb4fecc54538bc657ccd86fc4270debbde110d2f4b370ea4e4686b4b1f57b22a90adc7119f9a9ea4", 0x63}, {&(0x7f0000000680)="0548dffe0fe9c2b7739104321acef951dc19bca3666c096e4bfdb7a1195805a915cae3d4e8d3002dfe889efda1dd1c0586ffc5ccd824255a33cb8a3e1a82e46eb41db61526c10ec8c3db020793dbecf71a5fb3ed4140a92a60a94ef2445bc1a0dbdd4d0472457ed5fcff4c6dc2d21c855ce91aabed5285eb128748383eba41404c5e7f52430ea615efe279", 0x8b}, {&(0x7f0000000600)="16b23fdee8e4daea41d76dc0752141d9d97488694b043c3616f546e7cd0f21f4ef793bb336a9f7d1ee07f82621d96086d5377c", 0x33}, {&(0x7f0000000740)="a2d1100e5303c7e24467347f9f89c0c3abe6656a59f319a3d82728ab6214eafedd010d04a67d0ae3209a415e518b58c211939ef269b409f3512eab81d00228a7171e48241c2deadb65805098f89b56bb13e077d75797c7cebcf3a2b66850d93de97c65a0deb831d00dd9c01109879858630027944f9c7f08c2de287a47a508509acbd33964ece9a82b9bc06ca8c8f3d50cae8dd407c44bf6eb3bd35ad9c7b44c33ce5048bf416f034a557935dc755bab3ec0f83b5825563a806603955faedc2230d4827f213639c7ef307306959452efd9c132cbaa1e44221ad21fc6e27db63eb80996cfc25055dd38e3941fea92226cdfef30c9f3a7f2eeb8ec88e0676d8e197321740ca926283ba22fb56aed8f6aeed5c18c243ca5a297361feaa8546244229a73068e1a74ec713a5113fde2fcd69f0341450f679393acc8e75b0809be112a14c1f599327805371c1a0e01f423c24c70e37cb5dad476709f64003b1b8011ea555c8a6e1ebbdc277cef9d02c906a3fcf838692ae61675974cdb5fbc5379665337740e57df87ab23ec2a4974999e5833e04792e5d8fe8b8df2a826c6b587c702bece6500650cf666c5e58cb074956a1ab83c3c9c4677e3885c50fe8fffbf49447f3fedf7c4f622f7189c6c8994257bb446562fb54aac745449d39f28234baa78b1e78af6a6ac25d7fe07c93a26966af87f6233f77911429a38f9836ffd379794b15dc52dc84015b4c1d471e4c981187c6cf80c8794f15e67f6e37002c96de1adfc7bd77b07b6f669ca4dd129873d471f0cdb4b744e8f952e4a14c69c662e0112d51a368bf635a3b4a1b76197bb406709fb03c9eec0535265bdf2528b537ad9651e81f1cfb8a2b7bad7d4e39fc4dc43bdd1bbc6e361375fb54ea59aff16b30480fe063d0fa8f1fa96318e39b147ac3b77e6d567770be87afd5197ac1a77c1457051296cae12c2daf10e43401e620b42dae236a5bc982cdbb35a679bf4004dd254971ddd1a557748f0621c6107169818ac44a7d43c9444ffe5d54017b32f9d75157f1a8f93a23355a0f0094047f01721b6273fbb92baf2a31113d162a301dae29ec6d0aaf339e8148defb22f60e459e3d654aa991d521e7b951bc469d193a6a34950ee772ebdceb84e9869ea05971b5cba6f2f4681994bd9113be914b4a63d7cff28a2ab0dc4a46dcd11de33b12f889ae00206e32a33e9235ba12997c8044a59db2a700f7214e88ef595735c401bbe68af26aaa62e745b39eedac17c380208fede31d749e0584ea99a0762a27dfced5308c14415a5a33b9ec27e8d96427059d64f39dc6f99f0111f97186099a03d390eb654cdde4683883279550e7e5b9e74f698366da4c478755457a3f76965fba34acb8c0048c431ca0f95ccc2d9b5807ceb4f2153feb3c33f68ec101fb5b05188d0565d12ff68922ec1474816cff5cfb719df858d40219eb15968f6a082d7386cf59bdb026cf06b1c7071ddee412f202d9d621642a15d1475169332874dfef60f5ae9a080a4c2db3122022137920e5141940ea2f925ed2ebf23d71905233b4b1035fb615c9a241f063ea6c7954e31e8c71d4b3ec733ab6a489de42f120e61491dc6c6d437f7a363734f84d8057525adfd6b652afe25ade46bc5033babeb03754a280aba7c4b9870ee7cf3aecdfe09abfd002922f8d00cda46f03f7adf245183d762d25302cb30ed4276dd896beced1b169f2c38459d97e83a430a4e39ae4338e231c754fd5006fcd82aa2fc3ef68018ff2449d1ca10f0b52b60412305742162bcf4d22589ca0a9c3d3dba84bc392c7297f8227fc9c1112b6c1fcf8b883532011192fc152b4ad84e7964b3d0919582240bc08cb9b81dc168b40dd38d3ff558c738dae20aea7e35a1135becd4493a7c9c6c24d904301347f530d1130b617f822572f8bb4e5e8be0dfd2d036a97ba825152eaffccb0c50d30c34942e58f6f5328bcc9d71f6d7e485c9e5deb9a899e3a107ed6617b54c65b4711cc2e8eec30b0c400ab7db957180bff9bd7c00ed50609141f14951ad658a103cddbc8dd2e17e2d9145de022f052203f6fda2916911a7299bdcb28d426274e0187c370c51e5ab07ab84c5c5d6de7412f222281dcccb71b04b36c1629e9ddda954a57231059fbbf36e6c08e68de76fb32c53eedfceb948e47b380c2eaf9522ba1bbcd5551b1d5d7766804e4def5d10449a5ee675dd09e4d3a6f7aac969baefc24da2d108aa3af690266fd64d8d027d4e8c7749d99567f476d5b388fb35089d42740aff6b0b89f98c056cc282ec0398a576b6781a29db564e3a3f527e498e7f2a91383ac6d62b52e1910ac98aff38fcbcf07da5711c9a25165f282fb3b39735f8fbe0781040f698dab061d606975a0e40e6941ee31f81d15d4ed4195ad4bb5eaf7e1c959506118baca277edabad478aa9177b838323201367f4ae911cc963b08c4c94e2d2a47773f14661a387c43906d85468011012c60a590417eaf0c4fc8c597db72664c9b7cfe7fa74407bdeea354d97d09920ff04a866f06e962ade5df449fa1c9268bef20bcbbbdd0b5f307ac510fd91995ec0070b788e05ad86928cf5f97fdd6934af8b4c1cb6d7befec6bac0eb9b7845ce46a1bb0f904bb8a7179df2327aedb96ddf09885632ca85ae84ff123a80b1c4832745b56b24fd8f414cad14c312968603a35e0d5860cd3b68a99366cda4f5ec0b586bae77ec529783431cf96570fe5033b012f2ed4f390a399d32ccd70c56cc4c597b733446d53bdb37aaa20371b8a72a459f04f7d0469067b8609b3d814e533e11af36a1da5173b9b7fe1b97ddaba9dc7a19539e34922087f4ade97a722b4d8b6c88197adead7959d32aee77f41650efd31dd34b64bcf27f6144bb8616f9b813b52a4910d944c5ede168fa722b545e6b027e313aacce71c6300161ea479cadfb7a661ba6a86e6a4ec2a55bde8c349dea436c0fb7fd53cb8465079ee71ba8fb35ff213c9853773a5d9ca46414910da94a6d0294297c9831468f87511e8569cc872727ed038f3ff83543a7ba2df65507dfa184bc1bec724a7e9f5cf2af21f80b640c8732b44f0a96a5229856b47075fe96454efbd5e6c2a02485c06b86ddbad7e69aa588c8a0d7353f423b7441e10cc1d8d5530878a1085828decf5018bae9d2d1069ced3e3622c4d9f6388b2c76bc152a6a6490c8aba4dc73f1b4bb0b15821cc676a02fb3c76346d41f29a6e45beb3b8e810462cadcb5b410b3e16bd50c13f97071a57b21207d17c73ac0f439a3ac8fbf2440d6eb88c6f073356b1211edafd7818c15e626e93eeb3a29e08eae7e2a6f5173ed5762084bf52f87c87daf478d45afb14ec514cfe7448f80f1601b9f420dc4edcf08370c93f31948d1f1fce42a2da94e1668859812c210a383d14b3b18d18a7a32f2a9e19a9f28af09b7b8bf90b3c7e7adfd4a209af8dd0b9456718d8a2dbbef59a4e98b0e085d5fe284f12cb5434438005e8c209e6ab8c278f2e6739628b6ef23fcbb922685ba3f5476f5f3a590e91d8bbf2c76304aa4d5f39362ae41ec753014f44e0c718b6e6d5c062f2262c76d9518db7c1a43281f90eb1a2b0a66b5cdd8688d7eedd19de406eb01b33b27379509f438a9a01890ebbb55e5dc8db43e3f10759c4b68b0e5d028d5fe7588f6eaa06e5be1b03dfc7fa8715003efbd968b529ae0b41ab909c6dfe8125b00d9ccb5dbd98d68360f82a4c95a764072c5987d19cd84992ad1c167a6d43c7877155855c2ef37dfe27cd181d48243441d5043962f288050155309d8f311056d18e8e8144cf196d99a184ce861ce0ae743ec5d7bf734f665fa9eec1f5de5aa7c721988c02ddc2cf2f861c66ba401c3f615fed600b147cc29da2451e4f93f1397784f401d4fdedd278bfb8a5bc961fa826d4afa85316ddaa6ac9ec0afea01c7a2b45bbaa5f9fd62c84358a216ad07c31176a520f90cbb91edc13fbb67ade0fb71f7e6e24c507361302d562211df1f7b2de2bffdff0de8116cdab2f8406eba0c6da0c6608544dbfeb3d36e2d8adb08b30274319d205404fe238d55196f715d2c5c1871da5c01f2ca937b7e00dde5098ef7b6eb155a36df3c5844ebc39258aac54b4c86bf09eebe48a6b9a7e889a266c8761b23a5177a03c52268a96c44b740945431cc28c423450ea739543f4401d39fb4ec42573a883949f8e2e60e7c70294bba2ed0320d2d45f90a34e2e37ba04f45c61cb4274daefce564fe8c54dfb476f3bfdb402c804fc7af51c2ece761887c105fd29121cb9882d08609269ab30bd219b242fdfec26cdf6a25c746979eba7e57382f3f89759553a24c5451610076908bb53d2ce965310d1a1d0d60aa732a26d3e2e58d0e993c736f1cc353dcdc5134967120884fe61d99a73ee20afc9d15614d6f1ce1b3d6b558cf4cbf44f99bf7380ee324d7f90ab66de07b3ed07d39ff5c7758667e27a7356a7f49804d1ce4e4d10a4132dd23aa642b18e5f85d7caf4ead90a2d901c4fe19635b940f6a8db8b178653dfe120e4585d5e57660642914b607448312c8587a5f03f92961421a1e2c142fa08db8f7331415a17f08648ad7d6e769be7fc64e4bdbb2de23dcf64a8950dcc8bddb7409e93ce5dcc7e0d00e2961f7bb11101ed65ba8d017c5a5ccc5da738eea2947bba56dbc2e5b6a9f550efb8115b95c9fa079f5f6624465c4b366f58464fbc952b8ffb652c1459aad1abd06013a87a1b4132d9aacfe37f4415f45a4b23ebd4b3125ab5d77199afa174daea53e4bb703bc1a0d8154f73f53dca3bae69fdd0402cbd686add4182012a5625ba7a2bb49858944d006c6475ba1bbf9382b19fbcd6e3f48cb771b969bac9fa35ffb0460feec0130dd31927698f398f19deb695a1b3068398608d917172e023cf568c1657ad96f9c32634a84f873cc7ad49a71e3645cf5ec25596c299675a861200027bb0be68ca2122e13516de66bccf6e2819b33b6443fcf3c0a245898cbc480edf01852e3e0808c84ec020844714c14c56af54cecdd38e3f9a1b7785119e510c7ae1342d66b9ff52da605263d50add17f24cdd0e82dd1ada63af06d7948a72f0645c92a187e7905adb33725442702fa717df5fa63e1e0947d625c50f9e129c1ce21c39d90dc52f043e047a0a321b201b97757fef900badd7960bf1c079a74427465f7163441544c1b00766574640663d2372e7187b272aa0213e0656902666c6351ecddb3fc4de107eb8ab35e007b80b0309ad11e755017faca3ab47afe948fb34db7ca37111b0f3c60a964d773fcd8eda1cf499fb168a7e9d02a00364349b3d3f6e93ccadb1d935ac3eb7317c3c44505d132fd3ec4af4d765a2b376643e77b4590113e0cb7083de99f66b86702587d3165555651f5efc61259d27968a99a61cbcdae795eb535b243fc9ae0d99334033cdbddb3d08f63d20a4348842fa2db84a7668e8b4faf7b1d88591913496f93317fe20d86068d8763429390ff0514352c5b6838060a82b73b3c4d7a22f6c5a603345c0bece54b82bfac713bb23ff92fad82cf31b49d9a7aafd3dca425e1bb0069c6d961c168ec410b9fdc4611128f220d650cbfd0259bdf0d56004ad5a7c8470a1fa10f380fd8a8ab58218685cbabaf21befce79d8d3982d16bf20a8d911eb87b2e9051ba950e97c8e35581bc093acfa37ba8ea55d2e4816f6e302cccbc307c74cdcfc4577b13a794aff05e9812ba22c04a66cf1ffe6ea1e1dfecf21fcf57e1d2e5a0ab42a7463d101701b795baa4f7c13e97e02fc6ee28521196524545e37d34d3ae310b6f4adb8f1e6d9310883ab4342bf8", 0x1000}, {&(0x7f0000001740)="73a192e55bb02ef0fb99be06439a44d08f7fb728acb1b1df0eef80229835f06787190c50449bd4715229fa9651b425e44265b1dcf3c5cb3bdbd56db2479fe2", 0x3f}, {&(0x7f0000001780)="af66b2987903edcbafd250a019e26f4721eac44a1e6e88ea06ae9004793fe2f1efbed7028a381589938a5a0622b1052f5c6fb35044b6d089162be23fa01561c8eb", 0x41}], 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x258}, 0x0, 0x4008084, 0x1}, 0xfffeffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001980)={0x5, 0x80, 0x4, 0xa, 0x7, 0x6, 0x0, 0x1, 0x4004, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001940), 0x4}, 0x10000, 0x10000, 0x80000000, 0x1, 0x101, 0x1f, 0x4, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xa, r0, 0x3) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001900)={0x4, &(0x7f00000018c0)=[{0x4000, 0xb6, 0x65, 0x5}, {0x3, 0x8, 0x1, 0x4}, {0x8, 0xa4, 0x48, 0x58}, {0x5, 0xff, 0x40, 0x3ff}]}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'ip6gre0\x00', r8, 0x29, 0x7, 0x0, 0x70000, 0x20, @dev={0xfe, 0x80, '\x00', 0x43}, @loopback, 0x1, 0x8, 0x20, 0x9}}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r5, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x24200, 0x23456}, 0x4) 04:02:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000005, 0x2010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x1, 0x1}, 0x3fc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}}, 0xfff) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r4, 0x1) r6 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x101000) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x8) 04:02:54 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r1 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x804036, 0x10, 0x1, 0x1000000, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5263, &(0x7f0000000340)={0x0, 0xdc13, 0x1, 0x2, 0x29a, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 04:02:54 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) (async) r1 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x804036, 0x10, 0x1, 0x1000000, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5263, &(0x7f0000000340)={0x0, 0xdc13, 0x1, 0x2, 0x29a, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 04:02:54 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) (async) r1 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x804036, 0x10, 0x1, 0x1000000, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x10000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r7, 0x3, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x5263, &(0x7f0000000340)={0x0, 0xdc13, 0x1, 0x2, 0x29a, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) 04:02:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x109, &(0x7f0000000140)=0x8000307c, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x3, 0xff, 0x0, 0x0, 0xa, 0x0, {0x0, r9}}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) 04:02:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x109, &(0x7f0000000140)=0x8000307c, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x3, 0xff, 0x0, 0x0, 0xa, 0x0, {0x0, r9}}, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) 04:02:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:54 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="cce67dd3301db32836d81c2553bc8f29d2ddaa5f2e63244f3c30023cca3a15d244386b382f74eb2f85e6a6154b15d163a2c7d1bf9a90533072c914ca7a877119415102cca7572d0316cd408b90fc1c88869790ad89ce64c1066de92a479cd26716ed824c917d383ae4166d1c1e9609c87f1637a262a5d6dbb10591bbf50df0ae0138ce6da758e61c6d6317bdb67a9cee543cdc58b6bcc340a898db45f6f88597adf4bead8930b9a5f8bc2888b8d67964e70b8958990e4f", 0xb7}, {&(0x7f0000000340)="0e357de00ac81b568ad9bcb1bb4c5025eede0ca2e2d7f4b3d54468ebefabc573e40c2a222dc12debf2449130013e3f06364637bcbdd13705cf1472a751fe2755c572060af1e08297867a13b0b2915ef2828ce88f51f0bb82e43d9afb534982857e745bd95f7a644cc5f4ac1ff015a05189d404fb4a1b107ed0198dd83cd2b798913c047843310223f5393da0", 0x8c}, {&(0x7f0000000400)="1d9be5e748b97a9ad055285c396b449c4692144c23cee07a4e00f2d647a3ea3dccfe2840a94f4257cd0ac706d74b0ff3d43315aaa4cccc385fc4e5ab57e1eeb5579c4f1dd6c478dc8967c84c5251a55a1173204cfda95cbc81f2b36f4ee5a5047d2ab0c575a387c37566e5b1c1164d552bd3ce145741021e8dfda04709ed5d103abc84e6a8e2806267521155cb6d7b6a0704bd2fade6b2e1f08b28b734bd6b763bc51c24eec6a53cb2d91571e5cefe635cf4159bb95d2ede18a70684e150bf5ace4dc754b3a263c1b82c5bbdb48787e5e7b644b431bb2c", 0xd7}], 0x3, 0x4, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700002000000089000000064b01002c0065000001299078e00000020a010101830feae00000017f000001e0000002009404000094040000"]}) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001600000828bd7000fcdbdf2502803200", @ANYRES32=r4, @ANYBLOB="1400030077673000000000000000000000000000080008004100000008000100ac1414bb1400030076657468666900"], 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x34}}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff, 0xc7f, 0x2, 0x100, 0xfffffffffffffffb, 0x82c00040, r9}) (async) socket(0x2c, 0x1, 0x2) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) 04:02:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x109, &(0x7f0000000140)=0x8000307c, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x3, 0xff, 0x0, 0x0, 0xa, 0x0, {0x0, r9}}, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) 04:02:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:55 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:55 executing program 4: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001bc0)=""/34) (async) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)="3a5eb3cc6f6e8657905aed081a7a6769b43e632c398337a2e4661adf86be33d86832c42129e4a8d18c5686df643a0ad6cdaec84f326362c59437106dec6881f5dbb61670ad7aa32effc115932005dfd4618b91e5852c8e0ac7c0a5eb39cacb2ea7cbc531aada15a8e4abdbf611d4c2e13a5f22c053a3ad98f755a73a6a74c6df4bcb1bd449ef09605586", 0x8a}, {&(0x7f0000000400)="1ca07304d1541a68032d7cfb5861cd325187499fb66dd7323122ec2eaf83af69ead6fbb41a6210aff3aafe2097d7fab924a322024c4e0bb6b173bac8f82c79126fbac1706aa60b3ca177701dc9c93f2ba687f634ce4afe2863c2d7bd6b142120886a0e4d97c506488042fb9b94146a7980119203e469220b520ab17aec8a3c71009d57962be2ca0e58ab6e9bfb1263e2ad4742f596112afce27181209e3d3b3552ca21b0fdd23f93c77a78b8b3d7608bde52b4b9b7c4aa6334c490cb8e165233d8c0e15b84bdbb4389c61964b7094f64f4b877541c4b40c6dc061c6d960ddc15d18e15a02436", 0xe6}, {&(0x7f0000000500)="d3bc1773bf804516f897706d33186bc0670b5f71ce758f185494219ef669c53d4b5d411f098acdf2af1309b91e1ded803e883913d51ef688cbc53f0170f4e4a8f86de1ac5498468c109e95e0c5b558101e743c997d5e3a4db3bd822857ed12a43079da52f20885e62ffa3623b27eb6f2b8c55448f370867e2424942f61a9ca0becb0303dd756d32eac8eebe2956717a1ba46760ab920dab3fab2fe610b21a8ca94f0ed31dbe3ca29a21da12d0119c9cf2f95b61218681e1fba132e529ecf54da8273d4c3ba61d6c81f28b01bf8589679ecd4379ac2b50563", 0xd8}, {&(0x7f0000000240)="ed15a2e4c7c1c6ab6c86d151b062fa3f0f512d29c9e0567352bf24c9cb5d6cb5b84885c3fe7fea828875949a48a9f647644560ad32a960139e5223bb4fecc54538bc657ccd86fc4270debbde110d2f4b370ea4e4686b4b1f57b22a90adc7119f9a9ea4", 0x63}, {&(0x7f0000000680)="0548dffe0fe9c2b7739104321acef951dc19bca3666c096e4bfdb7a1195805a915cae3d4e8d3002dfe889efda1dd1c0586ffc5ccd824255a33cb8a3e1a82e46eb41db61526c10ec8c3db020793dbecf71a5fb3ed4140a92a60a94ef2445bc1a0dbdd4d0472457ed5fcff4c6dc2d21c855ce91aabed5285eb128748383eba41404c5e7f52430ea615efe279", 0x8b}, {&(0x7f0000000600)="16b23fdee8e4daea41d76dc0752141d9d97488694b043c3616f546e7cd0f21f4ef793bb336a9f7d1ee07f82621d96086d5377c", 0x33}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="73a192e55bb02ef0fb99be06439a44d08f7fb728acb1b1df0eef80229835f06787190c50449bd4715229fa9651b425e44265b1dcf3c5cb3bdbd56db2479fe2", 0x3f}, {&(0x7f0000001780)="af66b2987903edcbafd250a019e26f4721eac44a1e6e88ea06ae9004793fe2f1efbed7028a381589938a5a0622b1052f5c6fb35044b6d089162be23fa01561c8eb", 0x41}], 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x258}, 0x0, 0x4008084, 0x1}, 0xfffeffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001980)={0x5, 0x80, 0x4, 0xa, 0x7, 0x6, 0x0, 0x1, 0x4004, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001940), 0x4}, 0x10000, 0x10000, 0x80000000, 0x1, 0x101, 0x1f, 0x4, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xa, r0, 0x3) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001900)={0x4, &(0x7f00000018c0)=[{0x4000, 0xb6, 0x65, 0x5}, {0x3, 0x8, 0x1, 0x4}, {0x8, 0xa4, 0x48, 0x58}, {0x5, 0xff, 0x40, 0x3ff}]}, 0x10) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'ip6gre0\x00', r8, 0x29, 0x7, 0x0, 0x70000, 0x20, @dev={0xfe, 0x80, '\x00', 0x43}, @loopback, 0x1, 0x8, 0x20, 0x9}}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) (async, rerun: 32) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async, rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x24200, 0x23456}, 0x4) 04:02:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000005, 0x2010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x1, 0x1}, 0x3fc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}}, 0xfff) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r4, 0x1) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x101000) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) (async, rerun: 64) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x8) 04:02:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x5c38, &(0x7f00000001c0)={0x0, 0xa85a, 0x8, 0x0, 0x1b1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r0, 0x8000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000340), 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r5, 0x8, 0x401, 0x2, 0x10, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x44f4, 0x2, 0x7, 0x8}]}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r0, 0x9}) shutdown(r3, 0x1) 04:02:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3, 0xffffff00}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x2000}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x5c38, &(0x7f00000001c0)={0x0, 0xa85a, 0x8, 0x0, 0x1b1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r0, 0x8000000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000340), 0x4) (async) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r5, 0x8, 0x401, 0x2, 0x10, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x44f4, 0x2, 0x7, 0x8}]}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r0, 0x9}) (async) shutdown(r3, 0x1) 04:02:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x5c38, &(0x7f00000001c0)={0x0, 0xa85a, 0x8, 0x0, 0x1b1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r0, 0x8000000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000340), 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r5, 0x8, 0x401, 0x2, 0x10, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x44f4, 0x2, 0x7, 0x8}]}, 0x10) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r0, 0x9}) shutdown(r3, 0x1) 04:02:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)="7a2cf27ae0", 0x5, 0x12044894, 0x1, {0x0, r4}}, 0xe31b) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000180)=0xfffffff7, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x515040}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8001) shutdown(r6, 0x1) 04:02:55 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="581b00001500000226bd7000fedbdf250a0030fde61c2e8b27c5a88055bb369a3551d8b33567224e7a8403898e9dfdff848962dc771dd2ae4c51b3d38a2c1fed023d51767c9b8c6edeb25cbb19df6ffc1668558297785132bb13ab9c4c932520f7dced71102525d8cc72a9fdd46fe4e4dd2aa92c4f989f3e1813fd9b937062b77cb583fa", @ANYRES32=0x0, @ANYBLOB="14000200fe8800000000000000000000000000010800080090000000140006000400000004000000000800000800000008000800040000000800090087050000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:55 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:55 executing program 4: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001bc0)=""/34) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)="3a5eb3cc6f6e8657905aed081a7a6769b43e632c398337a2e4661adf86be33d86832c42129e4a8d18c5686df643a0ad6cdaec84f326362c59437106dec6881f5dbb61670ad7aa32effc115932005dfd4618b91e5852c8e0ac7c0a5eb39cacb2ea7cbc531aada15a8e4abdbf611d4c2e13a5f22c053a3ad98f755a73a6a74c6df4bcb1bd449ef09605586", 0x8a}, {&(0x7f0000000400)="1ca07304d1541a68032d7cfb5861cd325187499fb66dd7323122ec2eaf83af69ead6fbb41a6210aff3aafe2097d7fab924a322024c4e0bb6b173bac8f82c79126fbac1706aa60b3ca177701dc9c93f2ba687f634ce4afe2863c2d7bd6b142120886a0e4d97c506488042fb9b94146a7980119203e469220b520ab17aec8a3c71009d57962be2ca0e58ab6e9bfb1263e2ad4742f596112afce27181209e3d3b3552ca21b0fdd23f93c77a78b8b3d7608bde52b4b9b7c4aa6334c490cb8e165233d8c0e15b84bdbb4389c61964b7094f64f4b877541c4b40c6dc061c6d960ddc15d18e15a02436", 0xe6}, {&(0x7f0000000500)="d3bc1773bf804516f897706d33186bc0670b5f71ce758f185494219ef669c53d4b5d411f098acdf2af1309b91e1ded803e883913d51ef688cbc53f0170f4e4a8f86de1ac5498468c109e95e0c5b558101e743c997d5e3a4db3bd822857ed12a43079da52f20885e62ffa3623b27eb6f2b8c55448f370867e2424942f61a9ca0becb0303dd756d32eac8eebe2956717a1ba46760ab920dab3fab2fe610b21a8ca94f0ed31dbe3ca29a21da12d0119c9cf2f95b61218681e1fba132e529ecf54da8273d4c3ba61d6c81f28b01bf8589679ecd4379ac2b50563", 0xd8}, {&(0x7f0000000240)="ed15a2e4c7c1c6ab6c86d151b062fa3f0f512d29c9e0567352bf24c9cb5d6cb5b84885c3fe7fea828875949a48a9f647644560ad32a960139e5223bb4fecc54538bc657ccd86fc4270debbde110d2f4b370ea4e4686b4b1f57b22a90adc7119f9a9ea4", 0x63}, {&(0x7f0000000680)="0548dffe0fe9c2b7739104321acef951dc19bca3666c096e4bfdb7a1195805a915cae3d4e8d3002dfe889efda1dd1c0586ffc5ccd824255a33cb8a3e1a82e46eb41db61526c10ec8c3db020793dbecf71a5fb3ed4140a92a60a94ef2445bc1a0dbdd4d0472457ed5fcff4c6dc2d21c855ce91aabed5285eb128748383eba41404c5e7f52430ea615efe279", 0x8b}, {&(0x7f0000000600)="16b23fdee8e4daea41d76dc0752141d9d97488694b043c3616f546e7cd0f21f4ef793bb336a9f7d1ee07f82621d96086d5377c", 0x33}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="73a192e55bb02ef0fb99be06439a44d08f7fb728acb1b1df0eef80229835f06787190c50449bd4715229fa9651b425e44265b1dcf3c5cb3bdbd56db2479fe2", 0x3f}, {&(0x7f0000001780)="af66b2987903edcbafd250a019e26f4721eac44a1e6e88ea06ae9004793fe2f1efbed7028a381589938a5a0622b1052f5c6fb35044b6d089162be23fa01561c8eb", 0x41}], 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x258}, 0x0, 0x4008084, 0x1}, 0xfffeffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001980)={0x5, 0x80, 0x4, 0xa, 0x7, 0x6, 0x0, 0x1, 0x4004, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001940), 0x4}, 0x10000, 0x10000, 0x80000000, 0x1, 0x101, 0x1f, 0x4, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xa, r0, 0x3) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001900)={0x4, &(0x7f00000018c0)=[{0x4000, 0xb6, 0x65, 0x5}, {0x3, 0x8, 0x1, 0x4}, {0x8, 0xa4, 0x48, 0x58}, {0x5, 0xff, 0x40, 0x3ff}]}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001, 0x10}}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'ip6gre0\x00', r8, 0x29, 0x7, 0x0, 0x70000, 0x20, @dev={0xfe, 0x80, '\x00', 0x43}, @loopback, 0x1, 0x8, 0x20, 0x9}}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x24200, 0x23456}, 0x4) 04:02:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3, 0xffffff00}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x2000}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3, 0xffffff00}}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x2000}) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000005, 0x2010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x1, 0x1}, 0x3fc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}}, 0xfff) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r4, 0x1) r6 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x101000) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x8) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000005, 0x2010, r0, 0x8000000) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x1, 0x1}, 0x3fc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}}, 0xfff) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r4, 0x1) (async) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x101000) (async) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x8000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x8) (async) 04:02:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3, 0xffffff00}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x2000}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3, 0xffffff00}}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x2000}) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="c48f2cd3b1fe3a22a44fea5ab05350483899aa89c1b5f6debf582138f8c69a833c80cd015f78fc17475df89018a006b4e250f356ffb6f7832963760a0926bbbf91955c9e4bb36e9da322b4183b60d34f918efb96d5926b7f01225bb7821226a3ab5ddc261edb16f40bb3743ef8d4f004cc3620f95f56b78629039d82df45d15db93ccdcd45e84ac5d91ecad604f33d3e4a311225907d06932a13c658afae21fed80e50a1289c4ee32eeee9182a4972cb1da8d984d7c99e681095e34be3987ce8a442d57c3ff76f65320da996eec7dcd3e62cf7092f92c525eac9", 0xda, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r1) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) shutdown(r5, 0x1) 04:02:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)="7a2cf27ae0", 0x5, 0x12044894, 0x1, {0x0, r4}}, 0xe31b) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000180)=0xfffffff7, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x515040}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8001) (async) shutdown(r6, 0x1) 04:02:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000080)}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6, &(0x7f0000000700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/146, 0x92}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c00)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/114, 0x72}, {&(0x7f0000000f00)=""/160, 0xa0}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/135, 0x87}], 0x7, &(0x7f0000001200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001300), 0x0, &(0x7f0000001340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001440)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/161, 0xa1}, {&(0x7f0000002840)=""/94, 0x5e}, {&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f00000029c0)=""/16, 0x10}], 0x8, &(0x7f0000002a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/217, 0xd9}], 0x1, &(0x7f0000002cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/38, 0x26}, {&(0x7f0000002f00)=""/122, 0x7a}], 0x3, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/95, 0x5f}], 0x2, &(0x7f00000039c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010002000000bf576314192c7288e7e7e94737b9e3ac12b99aa719fcd39071865bcb9af33a79c9c151b2292c5762b1700ebeca63d031bdfd294b1267d1a7df5c7f00000000e98622d57f6d4ac26232dbfcee53d5e14d7323debe86a495", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/205, 0xcd}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x2}}], 0xa, 0x40, &(0x7f0000003880)={0x77359400}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10011, r6, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000003280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x13, 0x200000ce, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r10}}, 0xff) syz_io_uring_submit(r1, r8, &(0x7f0000003ac0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f00000032c0)={0x1, 0x80, 0x5}, &(0x7f0000003300)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x8) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000014, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000001300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000038c0), &(0x7f0000000080)='./file0\x00', 0x800, 0x4000}, 0x7fff) setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) dup2(r0, r12) shutdown(r3, 0x1) 04:02:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="581b00001500000226bd7000fedbdf250a0030fde61c2e8b27c5a88055bb369a3551d8b33567224e7a8403898e9dfdff848962dc771dd2ae4c51b3d38a2c1fed023d51767c9b8c6edeb25cbb19df6ffc1668558297785132bb13ab9c4c932520f7dced71102525d8cc72a9fdd46fe4e4dd2aa92c4f989f3e1813fd9b937062b77cb583fa", @ANYRES32=0x0, @ANYBLOB="14000200fe8800000000000000000000000000010800080090000000140006000400000004000000000800000800000008000800040000000800090087050000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="581b00001500000226bd7000fedbdf250a0030fde61c2e8b27c5a88055bb369a3551d8b33567224e7a8403898e9dfdff848962dc771dd2ae4c51b3d38a2c1fed023d51767c9b8c6edeb25cbb19df6ffc1668558297785132bb13ab9c4c932520f7dced71102525d8cc72a9fdd46fe4e4dd2aa92c4f989f3e1813fd9b937062b77cb583fa", @ANYRES32=0x0, @ANYBLOB="14000200fe8800000000000000000000000000010800080090000000140006000400000004000000000800000800000008000800040000000800090087050000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:56 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r0, 0x0, &(0x7f0000000180)="0574b44e414a9839f5aeba3ab53cd38a05cea190db17a13c9abc3f5a67a55fc335244304a04e1de8adeb128f62bde339327f127812a3c0cba78a6c1abfea682e20bff6dc3c5a6d3178015a51eb7e18fbd3dda466937a371e79e86174bf3e48a7d265710495eb512c7f82b1e4934a0fbdd0c680f29672094beb39f43ebcd38ccf", 0x80, 0x1f, 0x1, {0x0, r6}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x1000)=nil, 0x1000, 0xb, 0x1}, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/56, 0x38}], 0x6) syz_io_uring_setup(0x7bc2, &(0x7f0000000180)={0x0, 0xc311, 0x0, 0x3, 0xda}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 04:02:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="581b00001500000226bd7000fedbdf250a0030fde61c2e8b27c5a88055bb369a3551d8b33567224e7a8403898e9dfdff848962dc771dd2ae4c51b3d38a2c1fed023d51767c9b8c6edeb25cbb19df6ffc1668558297785132bb13ab9c4c932520f7dced71102525d8cc72a9fdd46fe4e4dd2aa92c4f989f3e1813fd9b937062b77cb583fa", @ANYRES32=0x0, @ANYBLOB="14000200fe8800000000000000000000000000010800080090000000140006000400000004000000000800000800000008000800040000000800090087050000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x1000)=nil, 0x1000, 0xb, 0x1}, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/56, 0x38}], 0x6) syz_io_uring_setup(0x7bc2, &(0x7f0000000180)={0x0, 0xc311, 0x0, 0x3, 0xda}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x1000)=nil, 0x1000, 0xb, 0x1}, 0x9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/56, 0x38}], 0x6) (async) syz_io_uring_setup(0x7bc2, &(0x7f0000000180)={0x0, 0xc311, 0x0, 0x3, 0xda}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) (async) 04:02:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x1000)=nil, 0x1000, 0xb, 0x1}, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/56, 0x38}], 0x6) syz_io_uring_setup(0x7bc2, &(0x7f0000000180)={0x0, 0xc311, 0x0, 0x3, 0xda}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x1000)=nil, 0x1000, 0xb, 0x1}, 0x9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/56, 0x38}], 0x6) (async) syz_io_uring_setup(0x7bc2, &(0x7f0000000180)={0x0, 0xc311, 0x0, 0x3, 0xda}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) (async) 04:02:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="c48f2cd3b1fe3a22a44fea5ab05350483899aa89c1b5f6debf582138f8c69a833c80cd015f78fc17475df89018a006b4e250f356ffb6f7832963760a0926bbbf91955c9e4bb36e9da322b4183b60d34f918efb96d5926b7f01225bb7821226a3ab5ddc261edb16f40bb3743ef8d4f004cc3620f95f56b78629039d82df45d15db93ccdcd45e84ac5d91ecad604f33d3e4a311225907d06932a13c658afae21fed80e50a1289c4ee32eeee9182a4972cb1da8d984d7c99e681095e34be3987ce8a442d57c3ff76f65320da996eec7dcd3e62cf7092f92c525eac9", 0xda, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r1) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) shutdown(r5, 0x1) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="c48f2cd3b1fe3a22a44fea5ab05350483899aa89c1b5f6debf582138f8c69a833c80cd015f78fc17475df89018a006b4e250f356ffb6f7832963760a0926bbbf91955c9e4bb36e9da322b4183b60d34f918efb96d5926b7f01225bb7821226a3ab5ddc261edb16f40bb3743ef8d4f004cc3620f95f56b78629039d82df45d15db93ccdcd45e84ac5d91ecad604f33d3e4a311225907d06932a13c658afae21fed80e50a1289c4ee32eeee9182a4972cb1da8d984d7c99e681095e34be3987ce8a442d57c3ff76f65320da996eec7dcd3e62cf7092f92c525eac9", 0xda, 0xfffffffffffffffc) (async) keyctl$unlink(0x9, r0, r1) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) (async) shutdown(r5, 0x1) (async) 04:02:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)="7a2cf27ae0", 0x5, 0x12044894, 0x1, {0x0, r4}}, 0xe31b) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000180)=0xfffffff7, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x515040}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8001) shutdown(r6, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)="7a2cf27ae0", 0x5, 0x12044894, 0x1, {0x0, r4}}, 0xe31b) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000180)=0xfffffff7, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x515040}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8001) (async) shutdown(r6, 0x1) (async) 04:02:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000008, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x1, 0x1, 0x0, 0x7, 0x4}, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r8, 0x1) 04:02:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000080)}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6, &(0x7f0000000700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/146, 0x92}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c00)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/114, 0x72}, {&(0x7f0000000f00)=""/160, 0xa0}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/135, 0x87}], 0x7, &(0x7f0000001200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001300), 0x0, &(0x7f0000001340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001440)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/161, 0xa1}, {&(0x7f0000002840)=""/94, 0x5e}, {&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f00000029c0)=""/16, 0x10}], 0x8, &(0x7f0000002a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/217, 0xd9}], 0x1, &(0x7f0000002cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/38, 0x26}, {&(0x7f0000002f00)=""/122, 0x7a}], 0x3, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/95, 0x5f}], 0x2, &(0x7f00000039c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010002000000bf576314192c7288e7e7e94737b9e3ac12b99aa719fcd39071865bcb9af33a79c9c151b2292c5762b1700ebeca63d031bdfd294b1267d1a7df5c7f00000000e98622d57f6d4ac26232dbfcee53d5e14d7323debe86a495", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/205, 0xcd}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x2}}], 0xa, 0x40, &(0x7f0000003880)={0x77359400}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10011, r6, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000003280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x13, 0x200000ce, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r10}}, 0xff) syz_io_uring_submit(r1, r8, &(0x7f0000003ac0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f00000032c0)={0x1, 0x80, 0x5}, &(0x7f0000003300)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x8) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000014, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000001300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000038c0), &(0x7f0000000080)='./file0\x00', 0x800, 0x4000}, 0x7fff) setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) dup2(r0, r12) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000080)}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6, &(0x7f0000000700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/146, 0x92}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c00)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/114, 0x72}, {&(0x7f0000000f00)=""/160, 0xa0}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/135, 0x87}], 0x7, &(0x7f0000001200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001300), 0x0, &(0x7f0000001340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001440)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/161, 0xa1}, {&(0x7f0000002840)=""/94, 0x5e}, {&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f00000029c0)=""/16, 0x10}], 0x8, &(0x7f0000002a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/217, 0xd9}], 0x1, &(0x7f0000002cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/38, 0x26}, {&(0x7f0000002f00)=""/122, 0x7a}], 0x3, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/95, 0x5f}], 0x2, &(0x7f00000039c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010002000000bf576314192c7288e7e7e94737b9e3ac12b99aa719fcd39071865bcb9af33a79c9c151b2292c5762b1700ebeca63d031bdfd294b1267d1a7df5c7f00000000e98622d57f6d4ac26232dbfcee53d5e14d7323debe86a495", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/205, 0xcd}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x2}}], 0xa, 0x40, &(0x7f0000003880)={0x77359400}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10011, r6, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000003280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x13, 0x200000ce, r10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r10}}, 0xff) (async) syz_io_uring_submit(r1, r8, &(0x7f0000003ac0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f00000032c0)={0x1, 0x80, 0x5}, &(0x7f0000003300)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x8) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000014, 0x10010, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r13, r2, &(0x7f0000001300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000038c0), &(0x7f0000000080)='./file0\x00', 0x800, 0x4000}, 0x7fff) (async) setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) dup2(r0, r12) (async) shutdown(r3, 0x1) (async) 04:02:57 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:02:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="c48f2cd3b1fe3a22a44fea5ab05350483899aa89c1b5f6debf582138f8c69a833c80cd015f78fc17475df89018a006b4e250f356ffb6f7832963760a0926bbbf91955c9e4bb36e9da322b4183b60d34f918efb96d5926b7f01225bb7821226a3ab5ddc261edb16f40bb3743ef8d4f004cc3620f95f56b78629039d82df45d15db93ccdcd45e84ac5d91ecad604f33d3e4a311225907d06932a13c658afae21fed80e50a1289c4ee32eeee9182a4972cb1da8d984d7c99e681095e34be3987ce8a442d57c3ff76f65320da996eec7dcd3e62cf7092f92c525eac9", 0xda, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r1) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) shutdown(r5, 0x1) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="c48f2cd3b1fe3a22a44fea5ab05350483899aa89c1b5f6debf582138f8c69a833c80cd015f78fc17475df89018a006b4e250f356ffb6f7832963760a0926bbbf91955c9e4bb36e9da322b4183b60d34f918efb96d5926b7f01225bb7821226a3ab5ddc261edb16f40bb3743ef8d4f004cc3620f95f56b78629039d82df45d15db93ccdcd45e84ac5d91ecad604f33d3e4a311225907d06932a13c658afae21fed80e50a1289c4ee32eeee9182a4972cb1da8d984d7c99e681095e34be3987ce8a442d57c3ff76f65320da996eec7dcd3e62cf7092f92c525eac9", 0xda, 0xfffffffffffffffc) (async) keyctl$unlink(0x9, r0, r1) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) (async) shutdown(r5, 0x1) (async) 04:02:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000080)}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6, &(0x7f0000000700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/146, 0x92}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c00)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/114, 0x72}, {&(0x7f0000000f00)=""/160, 0xa0}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/135, 0x87}], 0x7, &(0x7f0000001200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001300), 0x0, &(0x7f0000001340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001440)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/161, 0xa1}, {&(0x7f0000002840)=""/94, 0x5e}, {&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f00000029c0)=""/16, 0x10}], 0x8, &(0x7f0000002a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/217, 0xd9}], 0x1, &(0x7f0000002cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/38, 0x26}, {&(0x7f0000002f00)=""/122, 0x7a}], 0x3, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/95, 0x5f}], 0x2, &(0x7f00000039c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010002000000bf576314192c7288e7e7e94737b9e3ac12b99aa719fcd39071865bcb9af33a79c9c151b2292c5762b1700ebeca63d031bdfd294b1267d1a7df5c7f00000000e98622d57f6d4ac26232dbfcee53d5e14d7323debe86a495", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/205, 0xcd}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x2}}], 0xa, 0x40, &(0x7f0000003880)={0x77359400}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10011, r6, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000003280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x13, 0x200000ce, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r10}}, 0xff) syz_io_uring_submit(r1, r8, &(0x7f0000003ac0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f00000032c0)={0x1, 0x80, 0x5}, &(0x7f0000003300)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x8) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000014, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000001300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000038c0), &(0x7f0000000080)='./file0\x00', 0x800, 0x4000}, 0x7fff) setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) dup2(r0, r12) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000080)}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6, &(0x7f0000000700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/146, 0x92}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c00)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/114, 0x72}, {&(0x7f0000000f00)=""/160, 0xa0}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/135, 0x87}], 0x7, &(0x7f0000001200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001300), 0x0, &(0x7f0000001340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001440)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/161, 0xa1}, {&(0x7f0000002840)=""/94, 0x5e}, {&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f00000029c0)=""/16, 0x10}], 0x8, &(0x7f0000002a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/217, 0xd9}], 0x1, &(0x7f0000002cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/38, 0x26}, {&(0x7f0000002f00)=""/122, 0x7a}], 0x3, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/95, 0x5f}], 0x2, &(0x7f00000039c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010002000000bf576314192c7288e7e7e94737b9e3ac12b99aa719fcd39071865bcb9af33a79c9c151b2292c5762b1700ebeca63d031bdfd294b1267d1a7df5c7f00000000e98622d57f6d4ac26232dbfcee53d5e14d7323debe86a495", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/205, 0xcd}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x2}}], 0xa, 0x40, &(0x7f0000003880)={0x77359400}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10011, r6, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000003280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x13, 0x200000ce, r10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r10}}, 0xff) (async) syz_io_uring_submit(r1, r8, &(0x7f0000003ac0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f00000032c0)={0x1, 0x80, 0x5}, &(0x7f0000003300)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x8) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000014, 0x10010, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r13, r2, &(0x7f0000001300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000038c0), &(0x7f0000000080)='./file0\x00', 0x800, 0x4000}, 0x7fff) (async) setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) dup2(r0, r12) (async) shutdown(r3, 0x1) (async) 04:02:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x356f, &(0x7f0000000180)={0x0, 0xb809, 0x10, 0x2, 0xed, 0x0, r0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006c9000/0x13000)=nil, 0x13000, 0x3000009, 0x13, r0, 0x10000000) inotify_init1(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x1}, 0x101) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000680)=""/97, 0x61}], 0x6) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:02:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r0, 0x0, &(0x7f0000000180)="0574b44e414a9839f5aeba3ab53cd38a05cea190db17a13c9abc3f5a67a55fc335244304a04e1de8adeb128f62bde339327f127812a3c0cba78a6c1abfea682e20bff6dc3c5a6d3178015a51eb7e18fbd3dda466937a371e79e86174bf3e48a7d265710495eb512c7f82b1e4934a0fbdd0c680f29672094beb39f43ebcd38ccf", 0x80, 0x1f, 0x1, {0x0, r6}}, 0xffff) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:02:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0xfffffffffffffff2, 0x0}}, 0x7) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:57 executing program 3: r0 = syz_io_uring_setup(0x1dd7, &(0x7f0000000180)={0x0, 0xf14d, 0x10, 0xffffffff, 0x1fffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x8000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x101802, 0x0) mmap(&(0x7f00006d7000/0x3000)=nil, 0x3000, 0x8, 0x40010, r7, 0x3e174000) syz_io_uring_setup(0x7e1d, &(0x7f0000000200)={0x0, 0x6105, 0x4, 0x1, 0x1a0, 0x0, r0}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f00000002c0)=0x2d0e8911, 0x0, 0x4) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, {0x0, 0x0, r6}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_setup(0x8, &(0x7f0000000340)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r11 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r11, 0x3, 0xffffffffffffffff, 0x0) io_submit(r9, 0x3, &(0x7f0000000680)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x7, r10, &(0x7f0000000380)="faa395ed62fb6830c2d92a36abbb35d5fc5d7b472a056ed82db21c658c3beace3eaa73e2d29dbc8ec2035df81bd1174b40bdef1f96de35c1bbb3599bdae2dd486db74f81f9c7180ad917d70e2a1a49375b39e934164678a7c0a2451fd9d1703da0767b97cdc67356bca62d73c9e2ffcca4ffb8c292d460a721dc737fc9f8b591587023204bf491eae777ba91a868b9082d7cee722f924bc3e940835953aede268c40f7cec846df95ef1d1f4ec2558599f5e6108ef59bd46a91a7eacc5a78523c2f8c771d3b9e1b333a2623671785910b45a71be249fa80332b81a815f4674fb2af9137a2bb6fd5598ec8f53c20f93953", 0xf0, 0x3, 0x0, 0x2, r11}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x7fff, r6, &(0x7f00000004c0)="c20488704a7370e23233ecc9877303c4894a98c7c4588e54ebdc47", 0x1b, 0xf4, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x5, r4, &(0x7f0000000540)="d3d72ff2da38483d97133ef0c4f0f23de7841178cfe02bf4677f0295ddee683d22b9ca684e6fbdb89f8ffecb890ad07464db74971524bd30e729c94aefff110d61dd6cdfd2e3e9d66398709d31ab578c5337e53443a96f330270a866e27eed70d8ff65a706bc956ae65f2e5e67ce9dcfd8cf3b9f16f7116471b125941c03a5dd2d6e741feb3c162c5a49fc2c741492b53ce546a27bf94e4812a5f56bb97ec1046b610c490fc423cb1fbf2200a5e5cf17f180f87bc72d9d3c163536ba01fa752c3b2932ff759dda4b686f376516ab2a6150973e7035ad52", 0xd7, 0x3, 0x0, 0x2}]) shutdown(r3, 0x1) 04:02:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000008, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x1, 0x1, 0x0, 0x7, 0x4}, 0x6) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r8, 0x1) 04:02:57 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:02:58 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:02:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r0, 0x0, &(0x7f0000000180)="0574b44e414a9839f5aeba3ab53cd38a05cea190db17a13c9abc3f5a67a55fc335244304a04e1de8adeb128f62bde339327f127812a3c0cba78a6c1abfea682e20bff6dc3c5a6d3178015a51eb7e18fbd3dda466937a371e79e86174bf3e48a7d265710495eb512c7f82b1e4934a0fbdd0c680f29672094beb39f43ebcd38ccf", 0x80, 0x1f, 0x1, {0x0, r6}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r0, 0x0, &(0x7f0000000180)="0574b44e414a9839f5aeba3ab53cd38a05cea190db17a13c9abc3f5a67a55fc335244304a04e1de8adeb128f62bde339327f127812a3c0cba78a6c1abfea682e20bff6dc3c5a6d3178015a51eb7e18fbd3dda466937a371e79e86174bf3e48a7d265710495eb512c7f82b1e4934a0fbdd0c680f29672094beb39f43ebcd38ccf", 0x80, 0x1f, 0x1, {0x0, r6}}, 0xffff) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:02:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x356f, &(0x7f0000000180)={0x0, 0xb809, 0x10, 0x2, 0xed, 0x0, r0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006c9000/0x13000)=nil, 0x13000, 0x3000009, 0x13, r0, 0x10000000) inotify_init1(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x1}, 0x101) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000680)=""/97, 0x61}], 0x6) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) io_uring_setup(0x356f, &(0x7f0000000180)={0x0, 0xb809, 0x10, 0x2, 0xed, 0x0, r0}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006c9000/0x13000)=nil, 0x13000, 0x3000009, 0x13, r0, 0x10000000) (async) inotify_init1(0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x1}, 0x101) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000680)=""/97, 0x61}], 0x6) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) 04:02:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0xfffffffffffffff2, 0x0}}, 0x7) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:58 executing program 3: r0 = syz_io_uring_setup(0x1dd7, &(0x7f0000000180)={0x0, 0xf14d, 0x10, 0xffffffff, 0x1fffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x8000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async, rerun: 32) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x101802, 0x0) (rerun: 32) mmap(&(0x7f00006d7000/0x3000)=nil, 0x3000, 0x8, 0x40010, r7, 0x3e174000) syz_io_uring_setup(0x7e1d, &(0x7f0000000200)={0x0, 0x6105, 0x4, 0x1, 0x1a0, 0x0, r0}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f00000002c0)=0x2d0e8911, 0x0, 0x4) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, {0x0, 0x0, r6}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_setup(0x8, &(0x7f0000000340)=0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r11 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r11, 0x3, 0xffffffffffffffff, 0x0) io_submit(r9, 0x3, &(0x7f0000000680)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x7, r10, &(0x7f0000000380)="faa395ed62fb6830c2d92a36abbb35d5fc5d7b472a056ed82db21c658c3beace3eaa73e2d29dbc8ec2035df81bd1174b40bdef1f96de35c1bbb3599bdae2dd486db74f81f9c7180ad917d70e2a1a49375b39e934164678a7c0a2451fd9d1703da0767b97cdc67356bca62d73c9e2ffcca4ffb8c292d460a721dc737fc9f8b591587023204bf491eae777ba91a868b9082d7cee722f924bc3e940835953aede268c40f7cec846df95ef1d1f4ec2558599f5e6108ef59bd46a91a7eacc5a78523c2f8c771d3b9e1b333a2623671785910b45a71be249fa80332b81a815f4674fb2af9137a2bb6fd5598ec8f53c20f93953", 0xf0, 0x3, 0x0, 0x2, r11}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x7fff, r6, &(0x7f00000004c0)="c20488704a7370e23233ecc9877303c4894a98c7c4588e54ebdc47", 0x1b, 0xf4, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x5, r4, &(0x7f0000000540)="d3d72ff2da38483d97133ef0c4f0f23de7841178cfe02bf4677f0295ddee683d22b9ca684e6fbdb89f8ffecb890ad07464db74971524bd30e729c94aefff110d61dd6cdfd2e3e9d66398709d31ab578c5337e53443a96f330270a866e27eed70d8ff65a706bc956ae65f2e5e67ce9dcfd8cf3b9f16f7116471b125941c03a5dd2d6e741feb3c162c5a49fc2c741492b53ce546a27bf94e4812a5f56bb97ec1046b610c490fc423cb1fbf2200a5e5cf17f180f87bc72d9d3c163536ba01fa752c3b2932ff759dda4b686f376516ab2a6150973e7035ad52", 0xd7, 0x3, 0x0, 0x2}]) (async) shutdown(r3, 0x1) 04:02:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x356f, &(0x7f0000000180)={0x0, 0xb809, 0x10, 0x2, 0xed, 0x0, r0}) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f00006c9000/0x13000)=nil, 0x13000, 0x3000009, 0x13, r0, 0x10000000) (async, rerun: 64) inotify_init1(0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x1}, 0x101) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000680)=""/97, 0x61}], 0x6) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async, rerun: 64) shutdown(r3, 0x1) (rerun: 64) 04:02:58 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 64) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000008, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x1, 0x1, 0x0, 0x7, 0x4}, 0x6) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) shutdown(r8, 0x1) (rerun: 32) 04:02:58 executing program 1: r0 = syz_io_uring_setup(0x54fc, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) pipe2$9p(&(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) fcntl$getownex(r0, 0x10, &(0x7f0000002b40)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0}, &(0x7f0000002c00)=0xc) statx(r9, &(0x7f0000002c40)='./file0\x00', 0x1000, 0x400, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002d80), 0x1, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r16, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="f936d08dbd1661e41af61217ada3cf32ef14a67ee4e6a8b507d5b0ec27cd7c77f3c897355324c3350569c56a2c6e00947beb12ee104f15ed58c40399963b8366217dd83883a042b763620a4a97731b9e19f137412ca45e891874c5dc0fdf737eb655533074c683ccb0e53cc6c0512649250d4a5ebd631dcd7973d448d97f8670c2f80c7429af728bc5262f797d8aa038eb41ec11ef9cf8a8586116bc8f74eba37a84e105dea4f4f2c8bb85150cd222f11257", 0xb2}, {&(0x7f0000000340)="3ee2550fd211a4157dd6914b5e8d07239b663df9da636af333532adffe65a616387a303d13d6167cbb2cddb5cdeed29c1c6984b62a9813aa607f7d93a82f7a9c6e196712a83cbeae55aa7edc016a207c7c2f226a5d331dcdb134e54e9b3e2583f9d57455de7302e056e879af5bcd18f0f537685f12ff25d76424cc1acf1a30bc11a149757eebece435cabd7d644a74adacb30da96233c0743852749d4f5800932b886eb5c6c4da5a3c", 0xa9}, {&(0x7f0000000400)="425a2e2c0d680f9c95806af3655aaed260c56b544002ff24e96273786ed3e9b40446dd0ff03661c4b0d0345347da35bbcf8079d405116c4493dd271368a44063fc4800a81b83f347e1fbdf46bf5ec34502dd48a27f71467f7c60439cc79b8859822e55e5b601538318b3f408184847913ea86b77b9052cb87e9db9c7f0083fe3f3bd515120bc787e332015342081b4d294c23f26a80cae", 0x97}, {&(0x7f00000004c0)="a708fbadd7fc8c3eb83d65e4626a59b2c0e23d5b497f0f8b9be0d7c5bd76c7f9665171d5fd31736f64f6b362221027d92c803d6435f92572786e8aca28308a4ed301000dd7e8184ab1e0b9e6720eaae2a5fb5a5502c5629955813cd2a82f1597a09455ea4cab", 0x66}, {&(0x7f0000000080)="17f40fa364c7dd717e2a6fdbaf3dc03e15d5c26fe5", 0x15}], 0x5, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x108, 0x40080}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000900)="fc3f4ded1cb3be7b635ced94cb1916a4c3dfae0d8c2fbbf5c0e785a41c0c5cde22f610f1b48e62ab565a6ff4fc57333f8aa189a35a9a276ec1cfcc4036eba51e15b96a32a0915a593514d2c258b5d78f3e850ccc1967cca2614868492f718d490f97e83d69f6cf6a0d93206b711d881da6c9788884025c576d7404d536a422712c26c984b09c1efc9079ef6cc89122d70ae577e2b43ad5159d39cb29e34536f3d00a55536d2f210acb7f67bc6d668f885072585ee2d0f61adabe754fe3b0af193508af0417147ac1", 0xc8}, {&(0x7f0000000a00)="50cf442684a6fb7989c03188f38f1e6c8c879093d8e8", 0x16}, {&(0x7f0000000a40)="685f7b3f651ac3cd0ef004733ab8544d298d7e97ca1117c3b0e83afeabed2a3ff22944213c257944d248d50002eec75dedb05bf99cb11969bb97a208b9e30372c708371f0c2891146831aefc955308796e44de50f8c41a94e84b385be3445b59c7a9c6b422e57d07b4269314f84872ff329d0908ba5bf39f73261b258fa915144ec53bc16682897ffddbe818d4785db83caf98fdf0e125f2a58767290f315aaf391d727bae564deaa8d24ee2a60c367296ceca7d7b04f6a03bab06aa166bb28450c92ac61717aff230d382c3a4a8d7625c3eed03db52fdb3b16b18de19e5bbd10ea5aa9a2a841713", 0xe8}, {&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000000c40)="3a88bfa7926d40d46bfd170f2e5a4eb74e3128b338f868d53377fcf16759889ced008e24e4b944fabc00aaa69a62e47326d6d4e275c399390804e16dea80a229b23c1359fe45fcac75d29b3c728034da42a594d0d6a4602537ff4262ff460568e8bed0eb61a55a3f1fb51bee3c85fe8c1d951b35f4a180dcef0608ca7f68b290b674715eda6f476562fc4518820e0899ac0c4658727b7a05de29e4835267d7c81452f17e1ba323400eebb51f7e12aa555b9284c208af7ea97b28c7253a008ed73b564f5f175dd85624ef53b272f4bd6e82", 0xd1}, {&(0x7f0000000d40)="27f29c5e0f15ae19c8824baa6961e9ac0e1072740df8e25b85ed3a767238cbee4438859127ded20e98fe5fba4cd6f00ab84622f0f12999", 0x37}, {&(0x7f0000000d80)="63f6386498f10241a65e46e6ac6d5d1902210630d835eaaa8f36a0b0f200e8079534a39717fad769090d258317c2558d93b8f6e97b7cb9d81fd8270bdf336b9d320d429156f814d054a2560ffc205486acf4d6cf1309880fb9db91b0762f220b112eec272ba67b228c454c8c8455ef6a76e190f5b58a62fd887af2dd8acbff428b66549d195978b6eeff26dffa7669aca194f87533e6a18338b91ca312dab9762910f2043a0e18283ae4ccddbbae967a9c66887efe3eda8524464c2be462c9dab28f0ee1db707dee413ed12b5a9e0b2466cc0aed7ce6bf038da4066eefd01d48c19d99f9b52fe29ec3648c7a5d8a", 0xee}], 0x7, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000f00)=@file={0x9e3be58756e7727a, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000f80)="d575ca8dc14be082f9b1df383dbd2b2f31c6b78b07ea7a312704e1ee4f126acde975c0ad7f5ea14340c7385ea86fe7c73a31a3552778b191962335f051d588440862fa314b8222a2dcf2da6e6c960139e86655a4bf9f6d1f2b7aa23dfa26fe834b01f0e4ed528da1de89aaa7fe2e7b4c105fbf1c4945f7331fb8d3de9db764d72a4dfb37907ed44b744ca16c3ea268f6189f756263d1c21c6cf69d86e33a8d450a8b01a970b95e061221bede12cfc2f09cb47268599ae8ccf8349407bafca4b4f2e05b62144d55f563ca7b6b6903803fb5e0c553a33a1644ddac14bd13d95045ee6139096b", 0xe5}, {&(0x7f0000001080)="4237f410d5ef8b78d0d205ded14f419adb9cf5990257c61445b8238ff7b81449c1bec416c60fc3b7fc324d20b2b19e93f5ed6f4ebb726762562462169b1c9893faaa4f8b58b1fb16dbfae734ba7840fcc82e01aed0e03bd50c72b7347d064abf299582ef3d28c693fc4f85ea22751bff5ecb55d1a7d02ef23b290cb3eba64bda7c447cc3432bfe346ef59027849d458e8ae51edf4a954675237969cc42cc5cb988ad4b8cd48732e190026dd45e9b5e08b7117eafaed0f8610be9f317b873cee270f3a3925db34d96cd1945dc3a20308e281d32edcb39fb696cbe41b8b4e51e3dbb63aa7597afb12e16f069d555f1d721f4", 0xf1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="cc133afcb2ae9586732574cd29f4b7531fb21f937fd1", 0x16}, {&(0x7f00000021c0)="5a5894b0e2c58560232e08544695110f1e22a78e0919de614d046e3254abb1adf4d2168d879d3d7e66961e5fab2e2a2002b612e3157c6502c0b84ddafc4015151c27cba4b2513c5b447c25", 0x4b}, {&(0x7f0000002240)="7c33097ab86ff3320ddfc03df96d62cad1301f9b7c6fd9536dcd024c68b988ea7d7b513ca4d79d5c41fa466ecf89ae73e689baf162b81144bbaa6d957ea6ab7ddb74e5d69bfb7ed7bf5ab630b1289a49e0825f5dd79960b224d5e3428534409fdf9e4457cd69b0d62a3bf5d0eb3b3c6c684a597f79c4e03f5ed8664748ea7c59c8f3705c274c532474b1248fd9dd68b035a97a3f437280313315fb0483acd1e6bf1d308a9ad5fd85b5d42737fcc83307d59d401931e31f5abc749698a88c204499d0d9", 0xc3}, {&(0x7f0000002340)="536baf67535169a1496a1d9bd07f07b66668a0c371ae29da5f9f737fe98900f727682e7df78a6aaf3312669f854b016f0b64e4ac1479c9b72607512e8dcec94aea645b8d5bc7faa57494192b66458eb3d7e47f899086145cb9d3c898e9bc78357a5a881290863e6fcb353413a132c74370d7375a2ee035edad291e5c7bfbfdea54e7128725913065c36b5edca52ba01c7fa15f263909ceaf00be42e24089bfc46d8b28f0eea2f9b30c44cc2c0f4c2e60", 0xb0}, {&(0x7f0000002400)="0619e19dbece4820739b4e22af4386e8cf809cdc7c9064941e00ff1633c8a9d8aaca7a8c8020d80c58003a5af6b73e3d8778cd951ba945", 0x37}, {&(0x7f0000002440)="506f24dc86fd5b03455999e26649e82092dd0576c5bce24d7b375108b1e9f78605bece2ca552bb79c0b421aec7821cb384c5418535bd1409640aa2f344713d18930265cb3e3442b7f33d1845b9858c145274f5265e8497cba7f89a17e053ac87227e", 0x62}, {&(0x7f00000024c0)="c47fbc641c403a86a3374d0dd497ccb546cc8dffb868076a81bc6bff4900d2b7d9efa8aee6e99ef65636cab416ddc0d6d9f7127cbb322dc33e3b8447a0b03b914357044bfb81293f9f67565e9b934f8c81206433763079d2ef627dbcf89918da592a3d575b819d89bf1d68b323cbbd", 0x6f}], 0xa, 0x0, 0x0, 0x40000}}, {{&(0x7f0000002600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002680)="a327c9005b6cb5d8d3bba8db1321cafd02d6ba89e3be8630ba1ffb06c1f32bef8095054bb1a2689a57be44d59e222a9666b4abd0a55953ae5111f2a057774b539d1cd2e471fd5cf6f74673b84ab8188d11dc89b361a2c7b26900eb80125b7ab3bc70201b57c5a545369450e3d21a2f743419dfb0b02c852fd3d217bf", 0x7c}, {&(0x7f0000002700)="260665ab582174b755c43a006d79b77bb7da17087bea6b466bf770680135d07a125e19fb0495dc82cb232141a582ee70dc34e1397ff1cc094d928a14971f9e1efef07015426a05ade5117278ce1612a6788f3004416ad81ef6f173f3a0ede9b17bc727b7d29d615030f794a3f4b0895eaad618754f104ed761e85b1b068656e7956405f459497ea594b87a376aae3d98a82ba4e50be29bf5749d4046d1cc02c3c3b10e1a87b6f30ab491ce7f320ddbd4c8ad4edd26be4df18a499a442da51fbe0613f61840eea5596ae11abaca4b21f2", 0xd0}, {&(0x7f0000002800)="f5df3c7237b6ecae84b140c286aea8bb2202e1c4f337d74586e9db16a0d34d9ed669047758834bad5a0cc5209667c53ccac9a7373243fdff776a7b50d78447b52d2e74d5f97d97496fbe81831c855acd5b79b802fe48d1c2af9d43edc4b72aa4d38090a92ef6c1497fc53c4e9669774cc28c2b79ee88f9a2f9d816db033a3f2bf6b97ab813817dde28be9ba4115fe1979b86fed5d768f6c32bcc8f95989865651d0d096715660db76a7cecc30619dc03dbb38a9595781224ed5f5d8aa1", 0xbd}, {&(0x7f0000000680)="4594c0a0dc41280807b88a12700ed9a476d56d6058ee0eb51ba0fc09591e454f98daa41ea62e804f25daaf82c44014de02af02224bf8be3e9875830a1e018f0d63f1bae34155ffeca2be59259d95ff9cbe504bf14a0a71958a97d20ac08884634405c167f5ad56d24c48dc0705216852e9880c6c11b0419083f92fefb6fc1b710c6f23fbe58455efa0cee1c6a375", 0x8e}, {&(0x7f0000002980)="9e2bd1cbf0c30b02b9769a102d62e481bd1c80b56749bd42c1f8bda180274bbf2a4636ef658b122c52e06cc2ca8256fd73b9b1a8c15a1062d0f0e70209a0eb83182d320ed7bc7d4ba275165ceb77e91286f14541cfd95fc5609d09a8f7b26069b3ea8b3338884f5ded6b5d9f3bfb1583cd7f93e2270226bb0cfd7b8891532cd0b09a6e85eeb3a0d61dca318b003fdee6e1ad8c574a61015508", 0x99}], 0x5, &(0x7f0000003200)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="000000001cfc0008000000000000f55308ad7be266ffaef576d080195233dd37fad15a6a741094af91e6a88c4a371baf2c16c356f2bea2e0", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r13, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x20048000}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f80)="1857011e4be7b3cdcfee867dfc30071767b933bad3719e8ea0d48cc947496f3be310d6d672f86dfbaa7896dd5fed683e6021704b2361482f63df782b2619079d651ce91fff86ab2cda7d0551cda5f40036f4e4cc35bbc3a239e8cd490411aa06fcdcbf198718b374b8b71ea3ceac83777b58acf7b28c47b543c9d676700b2d1ce94431078f6a9de8ebe78680dc97b0eb41bd53e02193c36d728593", 0x9b}], 0x1, &(0x7f0000003080)=[@rights={{0x20, 0x1, 0x1, [r15, r4, r16, r3]}}], 0x20, 0x40805}}], 0x5, 0x20004060) [ 481.470080][ T24] audit: type=1400 audit(1645588978.807:473): avc: denied { write } for pid=31457 comm="syz-executor.1" name="snapshot" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 04:02:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x0) syz_io_uring_setup(0x38d1, &(0x7f0000000180)={0x0, 0x7822, 0x2, 0x1, 0x5b0a6ad8, 0x0, r3}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000240)={0x101580, 0x4e, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x692df9fc) 04:02:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x0) syz_io_uring_setup(0x38d1, &(0x7f0000000180)={0x0, 0x7822, 0x2, 0x1, 0x5b0a6ad8, 0x0, r3}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000240)={0x101580, 0x4e, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x692df9fc) 04:02:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x0) syz_io_uring_setup(0x38d1, &(0x7f0000000180)={0x0, 0x7822, 0x2, 0x1, 0x5b0a6ad8, 0x0, r3}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000240)={0x101580, 0x4e, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x692df9fc) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) dup3(r0, r0, 0x0) (async) syz_io_uring_setup(0x38d1, &(0x7f0000000180)={0x0, 0x7822, 0x2, 0x1, 0x5b0a6ad8, 0x0, r3}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000240)={0x101580, 0x4e, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x692df9fc) (async) 04:02:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1f29, &(0x7f0000000180)={0x0, 0xdc84, 0x8, 0x1, 0x2ff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x3, 0x2bf, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0xe83) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:02:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0xfffffffffffffff2, 0x0}}, 0x7) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:59 executing program 3: r0 = syz_io_uring_setup(0x1dd7, &(0x7f0000000180)={0x0, 0xf14d, 0x10, 0xffffffff, 0x1fffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x8000000) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x101802, 0x0) mmap(&(0x7f00006d7000/0x3000)=nil, 0x3000, 0x8, 0x40010, r7, 0x3e174000) syz_io_uring_setup(0x7e1d, &(0x7f0000000200)={0x0, 0x6105, 0x4, 0x1, 0x1a0, 0x0, r0}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f00000002c0)=0x2d0e8911, 0x0, 0x4) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, {0x0, 0x0, r6}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) io_setup(0x8, &(0x7f0000000340)=0x0) (rerun: 32) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async, rerun: 64) r11 = open(0x0, 0x0, 0x0) (rerun: 64) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r11, 0x3, 0xffffffffffffffff, 0x0) io_submit(r9, 0x3, &(0x7f0000000680)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x7, r10, &(0x7f0000000380)="faa395ed62fb6830c2d92a36abbb35d5fc5d7b472a056ed82db21c658c3beace3eaa73e2d29dbc8ec2035df81bd1174b40bdef1f96de35c1bbb3599bdae2dd486db74f81f9c7180ad917d70e2a1a49375b39e934164678a7c0a2451fd9d1703da0767b97cdc67356bca62d73c9e2ffcca4ffb8c292d460a721dc737fc9f8b591587023204bf491eae777ba91a868b9082d7cee722f924bc3e940835953aede268c40f7cec846df95ef1d1f4ec2558599f5e6108ef59bd46a91a7eacc5a78523c2f8c771d3b9e1b333a2623671785910b45a71be249fa80332b81a815f4674fb2af9137a2bb6fd5598ec8f53c20f93953", 0xf0, 0x3, 0x0, 0x2, r11}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x7fff, r6, &(0x7f00000004c0)="c20488704a7370e23233ecc9877303c4894a98c7c4588e54ebdc47", 0x1b, 0xf4, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x5, r4, &(0x7f0000000540)="d3d72ff2da38483d97133ef0c4f0f23de7841178cfe02bf4677f0295ddee683d22b9ca684e6fbdb89f8ffecb890ad07464db74971524bd30e729c94aefff110d61dd6cdfd2e3e9d66398709d31ab578c5337e53443a96f330270a866e27eed70d8ff65a706bc956ae65f2e5e67ce9dcfd8cf3b9f16f7116471b125941c03a5dd2d6e741feb3c162c5a49fc2c741492b53ce546a27bf94e4812a5f56bb97ec1046b610c490fc423cb1fbf2200a5e5cf17f180f87bc72d9d3c163536ba01fa752c3b2932ff759dda4b686f376516ab2a6150973e7035ad52", 0xd7, 0x3, 0x0, 0x2}]) shutdown(r3, 0x1) 04:02:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4000, @fd=r6, 0x4, &(0x7f0000000180)=""/232, 0xe8, 0x2, 0x1}, 0x2a) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 04:02:59 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) r7 = socket(0x15, 0xa, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="0100000000ffff69db0db900", @ANYRES32=r3, @ANYBLOB="148c0000000000002e2f66696c653000"]) r10 = inotify_init1(0x80000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$unix(r3, &(0x7f00000021c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="066df23979143874a9432c7f1a8e74900baf76f9aaf67549060a4d3bf75cab13961cb0680a40e610449b4b645b76ede45f467dca7eaa0b6350196e58c6ae853ba88f90da41bb116f0c8f513445c24898f5f5fa9782a6b192ccaf667b945110923b71dbbea574b680e25bd9059781e250d27643e1b165f4200067428f449dd782f3f3c3e46120c0d13e039ad4b33860c4d806d0165ce6fac8edeff5829e1204d743ba893bc82704f555da9d4ffb71c973ef77f86a0c640d08ddbdfc145579", 0xbe}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="0f1d5f3c5f8ff7366abccf6f80eca475a55d3637a8d4ffea114b3c3622674f9b8485188d70a289c53decea86a4e33299f7ad8cfbaf3f65ea18537cac8098044b37789bafbce78593d3bdc5221a1b3067a0091799184c3062a94efc6e4c5f53d19de7145d57ed0b39940aea2e949467303232bd78dc587ca2cb54390f945cf935dc0077e486d495093d654b3d68479fc9c45c26bb6520eb8b87db14f1e06dca320d191bafbf5a5e6bee29", 0xaa}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="0c1c884e16e9d38760d7bc1093f0f4cb5cd2ec66684d3a1ac3be1735434e9feca5a742cddc5bd07e012e290e2fd93382687c57fa80995cd6c25295c0cca7b39fd6fac2486b93e58196a0232ea51fe30c9da3eebb9707f3f7e733f743bcb7b8843823ab4c0292f3f93effb0be7c006ca769a7edbe472dda87a061cdd3de112648a56593ec9175cf89282a157ba64a09119185ac3378acfea1092cf59f5d695ef59f505b35118c2391", 0xa8}, {&(0x7f0000001680)="b4b2773d0bca7d9c071bbc8dd8f8235830c6871b109f78eb1f752288995bc894004aa375cb4e51172bc39b98d7cb619be1563187eefd1a9a1d05d8236724af5003f4666dbe68360c20001d381a25cb16588390578da01c8e7dfd3e", 0x5b}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x60, 0x40090}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001800)="06edbd194afb16d24987d549f04dab72862404702cbff2086a8374e4a2a497", 0x1f}, {&(0x7f0000001840)="b503f7e372ae6fcf7112d6e6af76a1de587fcfdf5fb12ce6b6a9465c9c32451c59bf0c711c282aee82e72f643d97a204bc7b5643847349f53b81ccda9cd097d88d232096c6acd96efe03358020766afe15c67514e388db5a4ba759fcd06954609f849bb6ca844d845b6f5d597113e3b8466d678bd4e5b9bdf751cec47cbc3c1d9c", 0x81}, {&(0x7f0000001900)="5d359d27ebb50f", 0x7}, {&(0x7f0000001940)="c6fe3cba1e48d7b6fda2ff57c9466c553e2eebb000fbaa3d925ae79965126987ce4618ffeab9e9c2f7ede32aa8cf4fe3b995b6ebe228d72a86e25bc87b2c4c6097c8d5dae5eb70743911984977a0d8221b1a1469bd21b295bdf721c3ef8dec599629952e097d1b33b75635175bc6c029719446377d679537cdc9a1636ab87c3f2cc7241b201a00d5eb86d6378f384c10bd587761", 0x94}, {&(0x7f0000001a00)="1472e3324631407f5cd9b0ab47f7b1e2421f62363828d512fbec5d2745", 0x1d}, {&(0x7f0000001a40)="1b6dc033d880d2fe73ce1e2e40c7ebe3f3563399382cfebeb225417d41ebf8dfffb8bb0eb9858066af9d39d7c79efc88e0e3b033a2c5165ddc8acf8e5ed291099dbcb8", 0x43}, {&(0x7f0000001ac0)="97a13dfa98212b7f7dbe2d955fc8ad8d5429e2c2959a8df6c2ec2a5a0597fd9499ac6df0749fccf1e9380968c51da719f093049217a99a24062e029754126168998c7200c1a5594e8c5250bd09b5db5a2baab6c6d43f9d6fffa8209c9b35c3fc2296179d0b30e11718da22984f146ef12eb29f2157cedd19fcbcb6e59bb3f874a1a93fa3e56ec60f9b13a76638c172ad11ad6b94e12742332dacc88e62eb9b1e6528a267a64b675af741363b49bbd9b23360864a96caf6420d842bcaf4ab2685d3479920f1ce5305064fae9fe2a5d67c170334f584212624399a52c2c746701fdc75", 0xe2}, {&(0x7f0000001bc0)="c04c214aa90ce56f64551521b2abcbf6f9e339ba24b3ce6697630702aeffe1474ae4a257055293f73a39417e68391687bb42c2452a989c9462fe2eadcb94e0d85b10a1d94ac885a6adf1f9640200ce90f93a82bb6e858ec4357a008b0377bcd9851026f9ece8c08ea5e025e456c8909d3f9d61abc2f077a9bfc4705ac070", 0x7e}, {&(0x7f0000001c40)="5de647b6a5c39bf3ff0a6878d54688bb30ddc1566c7d80e879805ab580e63956b99603bfb3a3c9c65bc7c38562d45ad150efe6c69989c1013d9ff97245346abc0d2da4a1e5da26ac623cf68744bc7b0f09890d8dfe2d5d0daa669e8cf7b0dfc5d3735e413b81ff0c06ec46fdb92d66294cbb9a3e1c7740450f8ef9572ffb19a04240240e86d999ffd6a86bec32b8", 0x8e}], 0x9, 0x0, 0x0, 0x4045}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)="3980cb35cc8efced60f1d55e19460881d80383935f327160149f39a55797360b9b5136c167fa915e678e464a3758a22f96a9a02df58878c7225061b2c9be1b20d958503f574c199a3c83054f90841fd37110ab5b998798b6d5694ae554ad1915cbbf329a28026a145e48988fd47bc0c5055608b52a2ef5543685247ab41fdd423684a33f9d5c6849b0381973082c0cd5c43e8010eaa885d30e254fec5d26226330254e41cb", 0xa5}, {&(0x7f0000001f00)="3ead4e7fbdded02f1526d734f780a89585a19f9c2d38e8ce", 0x18}, {&(0x7f0000001f40)="39b3f3213c65ec11235bd36feded9de8c4341d3bd10d53d904703a0dab749b66abf068c9f61cc922256d80fe1946c738c12b249480b41e8d2b5c92657a941255b79d4dd10f73e7bb796aecbdc8f8fc4812a6eb6a71", 0x55}, {&(0x7f0000001fc0)="96aa3a91b28ebd72e8e97554240bdf96338890525bbe6ab8ce256ffd3f5d49d6912fdaafa8822aa1da663706e10038d81cf48b0445b875edb23d86fae42e1c5b615f325d6a9bf6b7584c93ec9bb7a3f94320d768879b59836715298d6e8b1b211da0fa74acadc6e4ae964f134b1dc7", 0x6f}], 0x4, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}], 0x68, 0x10000000}}], 0x5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:02:59 executing program 1: r0 = syz_io_uring_setup(0x54fc, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) pipe2$9p(&(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) fcntl$getownex(r0, 0x10, &(0x7f0000002b40)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0}, &(0x7f0000002c00)=0xc) statx(r9, &(0x7f0000002c40)='./file0\x00', 0x1000, 0x400, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002d80), 0x1, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r16, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="f936d08dbd1661e41af61217ada3cf32ef14a67ee4e6a8b507d5b0ec27cd7c77f3c897355324c3350569c56a2c6e00947beb12ee104f15ed58c40399963b8366217dd83883a042b763620a4a97731b9e19f137412ca45e891874c5dc0fdf737eb655533074c683ccb0e53cc6c0512649250d4a5ebd631dcd7973d448d97f8670c2f80c7429af728bc5262f797d8aa038eb41ec11ef9cf8a8586116bc8f74eba37a84e105dea4f4f2c8bb85150cd222f11257", 0xb2}, {&(0x7f0000000340)="3ee2550fd211a4157dd6914b5e8d07239b663df9da636af333532adffe65a616387a303d13d6167cbb2cddb5cdeed29c1c6984b62a9813aa607f7d93a82f7a9c6e196712a83cbeae55aa7edc016a207c7c2f226a5d331dcdb134e54e9b3e2583f9d57455de7302e056e879af5bcd18f0f537685f12ff25d76424cc1acf1a30bc11a149757eebece435cabd7d644a74adacb30da96233c0743852749d4f5800932b886eb5c6c4da5a3c", 0xa9}, {&(0x7f0000000400)="425a2e2c0d680f9c95806af3655aaed260c56b544002ff24e96273786ed3e9b40446dd0ff03661c4b0d0345347da35bbcf8079d405116c4493dd271368a44063fc4800a81b83f347e1fbdf46bf5ec34502dd48a27f71467f7c60439cc79b8859822e55e5b601538318b3f408184847913ea86b77b9052cb87e9db9c7f0083fe3f3bd515120bc787e332015342081b4d294c23f26a80cae", 0x97}, {&(0x7f00000004c0)="a708fbadd7fc8c3eb83d65e4626a59b2c0e23d5b497f0f8b9be0d7c5bd76c7f9665171d5fd31736f64f6b362221027d92c803d6435f92572786e8aca28308a4ed301000dd7e8184ab1e0b9e6720eaae2a5fb5a5502c5629955813cd2a82f1597a09455ea4cab", 0x66}, {&(0x7f0000000080)="17f40fa364c7dd717e2a6fdbaf3dc03e15d5c26fe5", 0x15}], 0x5, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x108, 0x40080}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000900)="fc3f4ded1cb3be7b635ced94cb1916a4c3dfae0d8c2fbbf5c0e785a41c0c5cde22f610f1b48e62ab565a6ff4fc57333f8aa189a35a9a276ec1cfcc4036eba51e15b96a32a0915a593514d2c258b5d78f3e850ccc1967cca2614868492f718d490f97e83d69f6cf6a0d93206b711d881da6c9788884025c576d7404d536a422712c26c984b09c1efc9079ef6cc89122d70ae577e2b43ad5159d39cb29e34536f3d00a55536d2f210acb7f67bc6d668f885072585ee2d0f61adabe754fe3b0af193508af0417147ac1", 0xc8}, {&(0x7f0000000a00)="50cf442684a6fb7989c03188f38f1e6c8c879093d8e8", 0x16}, {&(0x7f0000000a40)="685f7b3f651ac3cd0ef004733ab8544d298d7e97ca1117c3b0e83afeabed2a3ff22944213c257944d248d50002eec75dedb05bf99cb11969bb97a208b9e30372c708371f0c2891146831aefc955308796e44de50f8c41a94e84b385be3445b59c7a9c6b422e57d07b4269314f84872ff329d0908ba5bf39f73261b258fa915144ec53bc16682897ffddbe818d4785db83caf98fdf0e125f2a58767290f315aaf391d727bae564deaa8d24ee2a60c367296ceca7d7b04f6a03bab06aa166bb28450c92ac61717aff230d382c3a4a8d7625c3eed03db52fdb3b16b18de19e5bbd10ea5aa9a2a841713", 0xe8}, {&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000000c40)="3a88bfa7926d40d46bfd170f2e5a4eb74e3128b338f868d53377fcf16759889ced008e24e4b944fabc00aaa69a62e47326d6d4e275c399390804e16dea80a229b23c1359fe45fcac75d29b3c728034da42a594d0d6a4602537ff4262ff460568e8bed0eb61a55a3f1fb51bee3c85fe8c1d951b35f4a180dcef0608ca7f68b290b674715eda6f476562fc4518820e0899ac0c4658727b7a05de29e4835267d7c81452f17e1ba323400eebb51f7e12aa555b9284c208af7ea97b28c7253a008ed73b564f5f175dd85624ef53b272f4bd6e82", 0xd1}, {&(0x7f0000000d40)="27f29c5e0f15ae19c8824baa6961e9ac0e1072740df8e25b85ed3a767238cbee4438859127ded20e98fe5fba4cd6f00ab84622f0f12999", 0x37}, {&(0x7f0000000d80)="63f6386498f10241a65e46e6ac6d5d1902210630d835eaaa8f36a0b0f200e8079534a39717fad769090d258317c2558d93b8f6e97b7cb9d81fd8270bdf336b9d320d429156f814d054a2560ffc205486acf4d6cf1309880fb9db91b0762f220b112eec272ba67b228c454c8c8455ef6a76e190f5b58a62fd887af2dd8acbff428b66549d195978b6eeff26dffa7669aca194f87533e6a18338b91ca312dab9762910f2043a0e18283ae4ccddbbae967a9c66887efe3eda8524464c2be462c9dab28f0ee1db707dee413ed12b5a9e0b2466cc0aed7ce6bf038da4066eefd01d48c19d99f9b52fe29ec3648c7a5d8a", 0xee}], 0x7, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000f00)=@file={0x9e3be58756e7727a, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000f80)="d575ca8dc14be082f9b1df383dbd2b2f31c6b78b07ea7a312704e1ee4f126acde975c0ad7f5ea14340c7385ea86fe7c73a31a3552778b191962335f051d588440862fa314b8222a2dcf2da6e6c960139e86655a4bf9f6d1f2b7aa23dfa26fe834b01f0e4ed528da1de89aaa7fe2e7b4c105fbf1c4945f7331fb8d3de9db764d72a4dfb37907ed44b744ca16c3ea268f6189f756263d1c21c6cf69d86e33a8d450a8b01a970b95e061221bede12cfc2f09cb47268599ae8ccf8349407bafca4b4f2e05b62144d55f563ca7b6b6903803fb5e0c553a33a1644ddac14bd13d95045ee6139096b", 0xe5}, {&(0x7f0000001080)="4237f410d5ef8b78d0d205ded14f419adb9cf5990257c61445b8238ff7b81449c1bec416c60fc3b7fc324d20b2b19e93f5ed6f4ebb726762562462169b1c9893faaa4f8b58b1fb16dbfae734ba7840fcc82e01aed0e03bd50c72b7347d064abf299582ef3d28c693fc4f85ea22751bff5ecb55d1a7d02ef23b290cb3eba64bda7c447cc3432bfe346ef59027849d458e8ae51edf4a954675237969cc42cc5cb988ad4b8cd48732e190026dd45e9b5e08b7117eafaed0f8610be9f317b873cee270f3a3925db34d96cd1945dc3a20308e281d32edcb39fb696cbe41b8b4e51e3dbb63aa7597afb12e16f069d555f1d721f4", 0xf1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="cc133afcb2ae9586732574cd29f4b7531fb21f937fd1", 0x16}, {&(0x7f00000021c0)="5a5894b0e2c58560232e08544695110f1e22a78e0919de614d046e3254abb1adf4d2168d879d3d7e66961e5fab2e2a2002b612e3157c6502c0b84ddafc4015151c27cba4b2513c5b447c25", 0x4b}, {&(0x7f0000002240)="7c33097ab86ff3320ddfc03df96d62cad1301f9b7c6fd9536dcd024c68b988ea7d7b513ca4d79d5c41fa466ecf89ae73e689baf162b81144bbaa6d957ea6ab7ddb74e5d69bfb7ed7bf5ab630b1289a49e0825f5dd79960b224d5e3428534409fdf9e4457cd69b0d62a3bf5d0eb3b3c6c684a597f79c4e03f5ed8664748ea7c59c8f3705c274c532474b1248fd9dd68b035a97a3f437280313315fb0483acd1e6bf1d308a9ad5fd85b5d42737fcc83307d59d401931e31f5abc749698a88c204499d0d9", 0xc3}, {&(0x7f0000002340)="536baf67535169a1496a1d9bd07f07b66668a0c371ae29da5f9f737fe98900f727682e7df78a6aaf3312669f854b016f0b64e4ac1479c9b72607512e8dcec94aea645b8d5bc7faa57494192b66458eb3d7e47f899086145cb9d3c898e9bc78357a5a881290863e6fcb353413a132c74370d7375a2ee035edad291e5c7bfbfdea54e7128725913065c36b5edca52ba01c7fa15f263909ceaf00be42e24089bfc46d8b28f0eea2f9b30c44cc2c0f4c2e60", 0xb0}, {&(0x7f0000002400)="0619e19dbece4820739b4e22af4386e8cf809cdc7c9064941e00ff1633c8a9d8aaca7a8c8020d80c58003a5af6b73e3d8778cd951ba945", 0x37}, {&(0x7f0000002440)="506f24dc86fd5b03455999e26649e82092dd0576c5bce24d7b375108b1e9f78605bece2ca552bb79c0b421aec7821cb384c5418535bd1409640aa2f344713d18930265cb3e3442b7f33d1845b9858c145274f5265e8497cba7f89a17e053ac87227e", 0x62}, {&(0x7f00000024c0)="c47fbc641c403a86a3374d0dd497ccb546cc8dffb868076a81bc6bff4900d2b7d9efa8aee6e99ef65636cab416ddc0d6d9f7127cbb322dc33e3b8447a0b03b914357044bfb81293f9f67565e9b934f8c81206433763079d2ef627dbcf89918da592a3d575b819d89bf1d68b323cbbd", 0x6f}], 0xa, 0x0, 0x0, 0x40000}}, {{&(0x7f0000002600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002680)="a327c9005b6cb5d8d3bba8db1321cafd02d6ba89e3be8630ba1ffb06c1f32bef8095054bb1a2689a57be44d59e222a9666b4abd0a55953ae5111f2a057774b539d1cd2e471fd5cf6f74673b84ab8188d11dc89b361a2c7b26900eb80125b7ab3bc70201b57c5a545369450e3d21a2f743419dfb0b02c852fd3d217bf", 0x7c}, {&(0x7f0000002700)="260665ab582174b755c43a006d79b77bb7da17087bea6b466bf770680135d07a125e19fb0495dc82cb232141a582ee70dc34e1397ff1cc094d928a14971f9e1efef07015426a05ade5117278ce1612a6788f3004416ad81ef6f173f3a0ede9b17bc727b7d29d615030f794a3f4b0895eaad618754f104ed761e85b1b068656e7956405f459497ea594b87a376aae3d98a82ba4e50be29bf5749d4046d1cc02c3c3b10e1a87b6f30ab491ce7f320ddbd4c8ad4edd26be4df18a499a442da51fbe0613f61840eea5596ae11abaca4b21f2", 0xd0}, {&(0x7f0000002800)="f5df3c7237b6ecae84b140c286aea8bb2202e1c4f337d74586e9db16a0d34d9ed669047758834bad5a0cc5209667c53ccac9a7373243fdff776a7b50d78447b52d2e74d5f97d97496fbe81831c855acd5b79b802fe48d1c2af9d43edc4b72aa4d38090a92ef6c1497fc53c4e9669774cc28c2b79ee88f9a2f9d816db033a3f2bf6b97ab813817dde28be9ba4115fe1979b86fed5d768f6c32bcc8f95989865651d0d096715660db76a7cecc30619dc03dbb38a9595781224ed5f5d8aa1", 0xbd}, {&(0x7f0000000680)="4594c0a0dc41280807b88a12700ed9a476d56d6058ee0eb51ba0fc09591e454f98daa41ea62e804f25daaf82c44014de02af02224bf8be3e9875830a1e018f0d63f1bae34155ffeca2be59259d95ff9cbe504bf14a0a71958a97d20ac08884634405c167f5ad56d24c48dc0705216852e9880c6c11b0419083f92fefb6fc1b710c6f23fbe58455efa0cee1c6a375", 0x8e}, {&(0x7f0000002980)="9e2bd1cbf0c30b02b9769a102d62e481bd1c80b56749bd42c1f8bda180274bbf2a4636ef658b122c52e06cc2ca8256fd73b9b1a8c15a1062d0f0e70209a0eb83182d320ed7bc7d4ba275165ceb77e91286f14541cfd95fc5609d09a8f7b26069b3ea8b3338884f5ded6b5d9f3bfb1583cd7f93e2270226bb0cfd7b8891532cd0b09a6e85eeb3a0d61dca318b003fdee6e1ad8c574a61015508", 0x99}], 0x5, &(0x7f0000003200)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="000000001cfc0008000000000000f55308ad7be266ffaef576d080195233dd37fad15a6a741094af91e6a88c4a371baf2c16c356f2bea2e0", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r13, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x20048000}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f80)="1857011e4be7b3cdcfee867dfc30071767b933bad3719e8ea0d48cc947496f3be310d6d672f86dfbaa7896dd5fed683e6021704b2361482f63df782b2619079d651ce91fff86ab2cda7d0551cda5f40036f4e4cc35bbc3a239e8cd490411aa06fcdcbf198718b374b8b71ea3ceac83777b58acf7b28c47b543c9d676700b2d1ce94431078f6a9de8ebe78680dc97b0eb41bd53e02193c36d728593", 0x9b}], 0x1, &(0x7f0000003080)=[@rights={{0x20, 0x1, 0x1, [r15, r4, r16, r3]}}], 0x20, 0x40805}}], 0x5, 0x20004060) syz_io_uring_setup(0x54fc, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) pipe2$9p(&(0x7f0000002b00), 0x80000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) fcntl$getownex(r0, 0x10, &(0x7f0000002b40)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002bc0), &(0x7f0000002c00)=0xc) (async) statx(r9, &(0x7f0000002c40)='./file0\x00', 0x1000, 0x400, &(0x7f0000002dc0)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002d80), 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r15, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r16, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="f936d08dbd1661e41af61217ada3cf32ef14a67ee4e6a8b507d5b0ec27cd7c77f3c897355324c3350569c56a2c6e00947beb12ee104f15ed58c40399963b8366217dd83883a042b763620a4a97731b9e19f137412ca45e891874c5dc0fdf737eb655533074c683ccb0e53cc6c0512649250d4a5ebd631dcd7973d448d97f8670c2f80c7429af728bc5262f797d8aa038eb41ec11ef9cf8a8586116bc8f74eba37a84e105dea4f4f2c8bb85150cd222f11257", 0xb2}, {&(0x7f0000000340)="3ee2550fd211a4157dd6914b5e8d07239b663df9da636af333532adffe65a616387a303d13d6167cbb2cddb5cdeed29c1c6984b62a9813aa607f7d93a82f7a9c6e196712a83cbeae55aa7edc016a207c7c2f226a5d331dcdb134e54e9b3e2583f9d57455de7302e056e879af5bcd18f0f537685f12ff25d76424cc1acf1a30bc11a149757eebece435cabd7d644a74adacb30da96233c0743852749d4f5800932b886eb5c6c4da5a3c", 0xa9}, {&(0x7f0000000400)="425a2e2c0d680f9c95806af3655aaed260c56b544002ff24e96273786ed3e9b40446dd0ff03661c4b0d0345347da35bbcf8079d405116c4493dd271368a44063fc4800a81b83f347e1fbdf46bf5ec34502dd48a27f71467f7c60439cc79b8859822e55e5b601538318b3f408184847913ea86b77b9052cb87e9db9c7f0083fe3f3bd515120bc787e332015342081b4d294c23f26a80cae", 0x97}, {&(0x7f00000004c0)="a708fbadd7fc8c3eb83d65e4626a59b2c0e23d5b497f0f8b9be0d7c5bd76c7f9665171d5fd31736f64f6b362221027d92c803d6435f92572786e8aca28308a4ed301000dd7e8184ab1e0b9e6720eaae2a5fb5a5502c5629955813cd2a82f1597a09455ea4cab", 0x66}, {&(0x7f0000000080)="17f40fa364c7dd717e2a6fdbaf3dc03e15d5c26fe5", 0x15}], 0x5, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x108, 0x40080}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000900)="fc3f4ded1cb3be7b635ced94cb1916a4c3dfae0d8c2fbbf5c0e785a41c0c5cde22f610f1b48e62ab565a6ff4fc57333f8aa189a35a9a276ec1cfcc4036eba51e15b96a32a0915a593514d2c258b5d78f3e850ccc1967cca2614868492f718d490f97e83d69f6cf6a0d93206b711d881da6c9788884025c576d7404d536a422712c26c984b09c1efc9079ef6cc89122d70ae577e2b43ad5159d39cb29e34536f3d00a55536d2f210acb7f67bc6d668f885072585ee2d0f61adabe754fe3b0af193508af0417147ac1", 0xc8}, {&(0x7f0000000a00)="50cf442684a6fb7989c03188f38f1e6c8c879093d8e8", 0x16}, {&(0x7f0000000a40)="685f7b3f651ac3cd0ef004733ab8544d298d7e97ca1117c3b0e83afeabed2a3ff22944213c257944d248d50002eec75dedb05bf99cb11969bb97a208b9e30372c708371f0c2891146831aefc955308796e44de50f8c41a94e84b385be3445b59c7a9c6b422e57d07b4269314f84872ff329d0908ba5bf39f73261b258fa915144ec53bc16682897ffddbe818d4785db83caf98fdf0e125f2a58767290f315aaf391d727bae564deaa8d24ee2a60c367296ceca7d7b04f6a03bab06aa166bb28450c92ac61717aff230d382c3a4a8d7625c3eed03db52fdb3b16b18de19e5bbd10ea5aa9a2a841713", 0xe8}, {&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000000c40)="3a88bfa7926d40d46bfd170f2e5a4eb74e3128b338f868d53377fcf16759889ced008e24e4b944fabc00aaa69a62e47326d6d4e275c399390804e16dea80a229b23c1359fe45fcac75d29b3c728034da42a594d0d6a4602537ff4262ff460568e8bed0eb61a55a3f1fb51bee3c85fe8c1d951b35f4a180dcef0608ca7f68b290b674715eda6f476562fc4518820e0899ac0c4658727b7a05de29e4835267d7c81452f17e1ba323400eebb51f7e12aa555b9284c208af7ea97b28c7253a008ed73b564f5f175dd85624ef53b272f4bd6e82", 0xd1}, {&(0x7f0000000d40)="27f29c5e0f15ae19c8824baa6961e9ac0e1072740df8e25b85ed3a767238cbee4438859127ded20e98fe5fba4cd6f00ab84622f0f12999", 0x37}, {&(0x7f0000000d80)="63f6386498f10241a65e46e6ac6d5d1902210630d835eaaa8f36a0b0f200e8079534a39717fad769090d258317c2558d93b8f6e97b7cb9d81fd8270bdf336b9d320d429156f814d054a2560ffc205486acf4d6cf1309880fb9db91b0762f220b112eec272ba67b228c454c8c8455ef6a76e190f5b58a62fd887af2dd8acbff428b66549d195978b6eeff26dffa7669aca194f87533e6a18338b91ca312dab9762910f2043a0e18283ae4ccddbbae967a9c66887efe3eda8524464c2be462c9dab28f0ee1db707dee413ed12b5a9e0b2466cc0aed7ce6bf038da4066eefd01d48c19d99f9b52fe29ec3648c7a5d8a", 0xee}], 0x7, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000f00)=@file={0x9e3be58756e7727a, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000f80)="d575ca8dc14be082f9b1df383dbd2b2f31c6b78b07ea7a312704e1ee4f126acde975c0ad7f5ea14340c7385ea86fe7c73a31a3552778b191962335f051d588440862fa314b8222a2dcf2da6e6c960139e86655a4bf9f6d1f2b7aa23dfa26fe834b01f0e4ed528da1de89aaa7fe2e7b4c105fbf1c4945f7331fb8d3de9db764d72a4dfb37907ed44b744ca16c3ea268f6189f756263d1c21c6cf69d86e33a8d450a8b01a970b95e061221bede12cfc2f09cb47268599ae8ccf8349407bafca4b4f2e05b62144d55f563ca7b6b6903803fb5e0c553a33a1644ddac14bd13d95045ee6139096b", 0xe5}, {&(0x7f0000001080)="4237f410d5ef8b78d0d205ded14f419adb9cf5990257c61445b8238ff7b81449c1bec416c60fc3b7fc324d20b2b19e93f5ed6f4ebb726762562462169b1c9893faaa4f8b58b1fb16dbfae734ba7840fcc82e01aed0e03bd50c72b7347d064abf299582ef3d28c693fc4f85ea22751bff5ecb55d1a7d02ef23b290cb3eba64bda7c447cc3432bfe346ef59027849d458e8ae51edf4a954675237969cc42cc5cb988ad4b8cd48732e190026dd45e9b5e08b7117eafaed0f8610be9f317b873cee270f3a3925db34d96cd1945dc3a20308e281d32edcb39fb696cbe41b8b4e51e3dbb63aa7597afb12e16f069d555f1d721f4", 0xf1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="cc133afcb2ae9586732574cd29f4b7531fb21f937fd1", 0x16}, {&(0x7f00000021c0)="5a5894b0e2c58560232e08544695110f1e22a78e0919de614d046e3254abb1adf4d2168d879d3d7e66961e5fab2e2a2002b612e3157c6502c0b84ddafc4015151c27cba4b2513c5b447c25", 0x4b}, {&(0x7f0000002240)="7c33097ab86ff3320ddfc03df96d62cad1301f9b7c6fd9536dcd024c68b988ea7d7b513ca4d79d5c41fa466ecf89ae73e689baf162b81144bbaa6d957ea6ab7ddb74e5d69bfb7ed7bf5ab630b1289a49e0825f5dd79960b224d5e3428534409fdf9e4457cd69b0d62a3bf5d0eb3b3c6c684a597f79c4e03f5ed8664748ea7c59c8f3705c274c532474b1248fd9dd68b035a97a3f437280313315fb0483acd1e6bf1d308a9ad5fd85b5d42737fcc83307d59d401931e31f5abc749698a88c204499d0d9", 0xc3}, {&(0x7f0000002340)="536baf67535169a1496a1d9bd07f07b66668a0c371ae29da5f9f737fe98900f727682e7df78a6aaf3312669f854b016f0b64e4ac1479c9b72607512e8dcec94aea645b8d5bc7faa57494192b66458eb3d7e47f899086145cb9d3c898e9bc78357a5a881290863e6fcb353413a132c74370d7375a2ee035edad291e5c7bfbfdea54e7128725913065c36b5edca52ba01c7fa15f263909ceaf00be42e24089bfc46d8b28f0eea2f9b30c44cc2c0f4c2e60", 0xb0}, {&(0x7f0000002400)="0619e19dbece4820739b4e22af4386e8cf809cdc7c9064941e00ff1633c8a9d8aaca7a8c8020d80c58003a5af6b73e3d8778cd951ba945", 0x37}, {&(0x7f0000002440)="506f24dc86fd5b03455999e26649e82092dd0576c5bce24d7b375108b1e9f78605bece2ca552bb79c0b421aec7821cb384c5418535bd1409640aa2f344713d18930265cb3e3442b7f33d1845b9858c145274f5265e8497cba7f89a17e053ac87227e", 0x62}, {&(0x7f00000024c0)="c47fbc641c403a86a3374d0dd497ccb546cc8dffb868076a81bc6bff4900d2b7d9efa8aee6e99ef65636cab416ddc0d6d9f7127cbb322dc33e3b8447a0b03b914357044bfb81293f9f67565e9b934f8c81206433763079d2ef627dbcf89918da592a3d575b819d89bf1d68b323cbbd", 0x6f}], 0xa, 0x0, 0x0, 0x40000}}, {{&(0x7f0000002600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002680)="a327c9005b6cb5d8d3bba8db1321cafd02d6ba89e3be8630ba1ffb06c1f32bef8095054bb1a2689a57be44d59e222a9666b4abd0a55953ae5111f2a057774b539d1cd2e471fd5cf6f74673b84ab8188d11dc89b361a2c7b26900eb80125b7ab3bc70201b57c5a545369450e3d21a2f743419dfb0b02c852fd3d217bf", 0x7c}, {&(0x7f0000002700)="260665ab582174b755c43a006d79b77bb7da17087bea6b466bf770680135d07a125e19fb0495dc82cb232141a582ee70dc34e1397ff1cc094d928a14971f9e1efef07015426a05ade5117278ce1612a6788f3004416ad81ef6f173f3a0ede9b17bc727b7d29d615030f794a3f4b0895eaad618754f104ed761e85b1b068656e7956405f459497ea594b87a376aae3d98a82ba4e50be29bf5749d4046d1cc02c3c3b10e1a87b6f30ab491ce7f320ddbd4c8ad4edd26be4df18a499a442da51fbe0613f61840eea5596ae11abaca4b21f2", 0xd0}, {&(0x7f0000002800)="f5df3c7237b6ecae84b140c286aea8bb2202e1c4f337d74586e9db16a0d34d9ed669047758834bad5a0cc5209667c53ccac9a7373243fdff776a7b50d78447b52d2e74d5f97d97496fbe81831c855acd5b79b802fe48d1c2af9d43edc4b72aa4d38090a92ef6c1497fc53c4e9669774cc28c2b79ee88f9a2f9d816db033a3f2bf6b97ab813817dde28be9ba4115fe1979b86fed5d768f6c32bcc8f95989865651d0d096715660db76a7cecc30619dc03dbb38a9595781224ed5f5d8aa1", 0xbd}, {&(0x7f0000000680)="4594c0a0dc41280807b88a12700ed9a476d56d6058ee0eb51ba0fc09591e454f98daa41ea62e804f25daaf82c44014de02af02224bf8be3e9875830a1e018f0d63f1bae34155ffeca2be59259d95ff9cbe504bf14a0a71958a97d20ac08884634405c167f5ad56d24c48dc0705216852e9880c6c11b0419083f92fefb6fc1b710c6f23fbe58455efa0cee1c6a375", 0x8e}, {&(0x7f0000002980)="9e2bd1cbf0c30b02b9769a102d62e481bd1c80b56749bd42c1f8bda180274bbf2a4636ef658b122c52e06cc2ca8256fd73b9b1a8c15a1062d0f0e70209a0eb83182d320ed7bc7d4ba275165ceb77e91286f14541cfd95fc5609d09a8f7b26069b3ea8b3338884f5ded6b5d9f3bfb1583cd7f93e2270226bb0cfd7b8891532cd0b09a6e85eeb3a0d61dca318b003fdee6e1ad8c574a61015508", 0x99}], 0x5, &(0x7f0000003200)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="000000001cfc0008000000000000f55308ad7be266ffaef576d080195233dd37fad15a6a741094af91e6a88c4a371baf2c16c356f2bea2e0", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r13, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x20048000}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f80)="1857011e4be7b3cdcfee867dfc30071767b933bad3719e8ea0d48cc947496f3be310d6d672f86dfbaa7896dd5fed683e6021704b2361482f63df782b2619079d651ce91fff86ab2cda7d0551cda5f40036f4e4cc35bbc3a239e8cd490411aa06fcdcbf198718b374b8b71ea3ceac83777b58acf7b28c47b543c9d676700b2d1ce94431078f6a9de8ebe78680dc97b0eb41bd53e02193c36d728593", 0x9b}], 0x1, &(0x7f0000003080)=[@rights={{0x20, 0x1, 0x1, [r15, r4, r16, r3]}}], 0x20, 0x40805}}], 0x5, 0x20004060) (async) [ 482.311218][T14362] loop0: detected capacity change from 0 to 270 04:02:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1f29, &(0x7f0000000180)={0x0, 0xdc84, 0x8, 0x1, 0x2ff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x3, 0x2bf, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0xe83) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_setup(0x1f29, &(0x7f0000000180)={0x0, 0xdc84, 0x8, 0x1, 0x2ff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x3, 0x2bf, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0xe83) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:03:00 executing program 1: r0 = syz_io_uring_setup(0x54fc, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) pipe2$9p(&(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) fcntl$getownex(r0, 0x10, &(0x7f0000002b40)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0}, &(0x7f0000002c00)=0xc) (async) statx(r9, &(0x7f0000002c40)='./file0\x00', 0x1000, 0x400, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002d80), 0x1, 0x0) (async) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r16, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="f936d08dbd1661e41af61217ada3cf32ef14a67ee4e6a8b507d5b0ec27cd7c77f3c897355324c3350569c56a2c6e00947beb12ee104f15ed58c40399963b8366217dd83883a042b763620a4a97731b9e19f137412ca45e891874c5dc0fdf737eb655533074c683ccb0e53cc6c0512649250d4a5ebd631dcd7973d448d97f8670c2f80c7429af728bc5262f797d8aa038eb41ec11ef9cf8a8586116bc8f74eba37a84e105dea4f4f2c8bb85150cd222f11257", 0xb2}, {&(0x7f0000000340)="3ee2550fd211a4157dd6914b5e8d07239b663df9da636af333532adffe65a616387a303d13d6167cbb2cddb5cdeed29c1c6984b62a9813aa607f7d93a82f7a9c6e196712a83cbeae55aa7edc016a207c7c2f226a5d331dcdb134e54e9b3e2583f9d57455de7302e056e879af5bcd18f0f537685f12ff25d76424cc1acf1a30bc11a149757eebece435cabd7d644a74adacb30da96233c0743852749d4f5800932b886eb5c6c4da5a3c", 0xa9}, {&(0x7f0000000400)="425a2e2c0d680f9c95806af3655aaed260c56b544002ff24e96273786ed3e9b40446dd0ff03661c4b0d0345347da35bbcf8079d405116c4493dd271368a44063fc4800a81b83f347e1fbdf46bf5ec34502dd48a27f71467f7c60439cc79b8859822e55e5b601538318b3f408184847913ea86b77b9052cb87e9db9c7f0083fe3f3bd515120bc787e332015342081b4d294c23f26a80cae", 0x97}, {&(0x7f00000004c0)="a708fbadd7fc8c3eb83d65e4626a59b2c0e23d5b497f0f8b9be0d7c5bd76c7f9665171d5fd31736f64f6b362221027d92c803d6435f92572786e8aca28308a4ed301000dd7e8184ab1e0b9e6720eaae2a5fb5a5502c5629955813cd2a82f1597a09455ea4cab", 0x66}, {&(0x7f0000000080)="17f40fa364c7dd717e2a6fdbaf3dc03e15d5c26fe5", 0x15}], 0x5, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x108, 0x40080}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000900)="fc3f4ded1cb3be7b635ced94cb1916a4c3dfae0d8c2fbbf5c0e785a41c0c5cde22f610f1b48e62ab565a6ff4fc57333f8aa189a35a9a276ec1cfcc4036eba51e15b96a32a0915a593514d2c258b5d78f3e850ccc1967cca2614868492f718d490f97e83d69f6cf6a0d93206b711d881da6c9788884025c576d7404d536a422712c26c984b09c1efc9079ef6cc89122d70ae577e2b43ad5159d39cb29e34536f3d00a55536d2f210acb7f67bc6d668f885072585ee2d0f61adabe754fe3b0af193508af0417147ac1", 0xc8}, {&(0x7f0000000a00)="50cf442684a6fb7989c03188f38f1e6c8c879093d8e8", 0x16}, {&(0x7f0000000a40)="685f7b3f651ac3cd0ef004733ab8544d298d7e97ca1117c3b0e83afeabed2a3ff22944213c257944d248d50002eec75dedb05bf99cb11969bb97a208b9e30372c708371f0c2891146831aefc955308796e44de50f8c41a94e84b385be3445b59c7a9c6b422e57d07b4269314f84872ff329d0908ba5bf39f73261b258fa915144ec53bc16682897ffddbe818d4785db83caf98fdf0e125f2a58767290f315aaf391d727bae564deaa8d24ee2a60c367296ceca7d7b04f6a03bab06aa166bb28450c92ac61717aff230d382c3a4a8d7625c3eed03db52fdb3b16b18de19e5bbd10ea5aa9a2a841713", 0xe8}, {&(0x7f0000000b40)="8d6e74b738147a6b7877edbf0bca28843e6dd68fc0e7ea0d6dcf39002ef0e303d71f6f2c09e6f916ed83c334c323b3c3e6a5e71adb7eb7c17dfd305029928b5fc826a04811bd3e16c5e9f63523c23929f0e81c9a0d96c18ccfd0f976fc8abc33236bb9177d74c7a3afbb9aa3a0b20037a585211ed7e4657a076a4a58b1720e9b6a473c87dc9a08a75ed92204803e52ef905345358fb3f1186d64a8efbeb98acbdf053db6a14309bbfca8ec26a68c59ba0b0ee46a12469f5bee585fd5224ad9c6f2cb99d4b449608c334a7b9683d54df0649c103fd603f02700924ec64f56123b442f2337cbec1d6b8b0e7f61df63be1c925a8de540592ba9fb96fc", 0xfb}, {&(0x7f0000000c40)="3a88bfa7926d40d46bfd170f2e5a4eb74e3128b338f868d53377fcf16759889ced008e24e4b944fabc00aaa69a62e47326d6d4e275c399390804e16dea80a229b23c1359fe45fcac75d29b3c728034da42a594d0d6a4602537ff4262ff460568e8bed0eb61a55a3f1fb51bee3c85fe8c1d951b35f4a180dcef0608ca7f68b290b674715eda6f476562fc4518820e0899ac0c4658727b7a05de29e4835267d7c81452f17e1ba323400eebb51f7e12aa555b9284c208af7ea97b28c7253a008ed73b564f5f175dd85624ef53b272f4bd6e82", 0xd1}, {&(0x7f0000000d40)="27f29c5e0f15ae19c8824baa6961e9ac0e1072740df8e25b85ed3a767238cbee4438859127ded20e98fe5fba4cd6f00ab84622f0f12999", 0x37}, {&(0x7f0000000d80)="63f6386498f10241a65e46e6ac6d5d1902210630d835eaaa8f36a0b0f200e8079534a39717fad769090d258317c2558d93b8f6e97b7cb9d81fd8270bdf336b9d320d429156f814d054a2560ffc205486acf4d6cf1309880fb9db91b0762f220b112eec272ba67b228c454c8c8455ef6a76e190f5b58a62fd887af2dd8acbff428b66549d195978b6eeff26dffa7669aca194f87533e6a18338b91ca312dab9762910f2043a0e18283ae4ccddbbae967a9c66887efe3eda8524464c2be462c9dab28f0ee1db707dee413ed12b5a9e0b2466cc0aed7ce6bf038da4066eefd01d48c19d99f9b52fe29ec3648c7a5d8a", 0xee}], 0x7, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000f00)=@file={0x9e3be58756e7727a, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000f80)="d575ca8dc14be082f9b1df383dbd2b2f31c6b78b07ea7a312704e1ee4f126acde975c0ad7f5ea14340c7385ea86fe7c73a31a3552778b191962335f051d588440862fa314b8222a2dcf2da6e6c960139e86655a4bf9f6d1f2b7aa23dfa26fe834b01f0e4ed528da1de89aaa7fe2e7b4c105fbf1c4945f7331fb8d3de9db764d72a4dfb37907ed44b744ca16c3ea268f6189f756263d1c21c6cf69d86e33a8d450a8b01a970b95e061221bede12cfc2f09cb47268599ae8ccf8349407bafca4b4f2e05b62144d55f563ca7b6b6903803fb5e0c553a33a1644ddac14bd13d95045ee6139096b", 0xe5}, {&(0x7f0000001080)="4237f410d5ef8b78d0d205ded14f419adb9cf5990257c61445b8238ff7b81449c1bec416c60fc3b7fc324d20b2b19e93f5ed6f4ebb726762562462169b1c9893faaa4f8b58b1fb16dbfae734ba7840fcc82e01aed0e03bd50c72b7347d064abf299582ef3d28c693fc4f85ea22751bff5ecb55d1a7d02ef23b290cb3eba64bda7c447cc3432bfe346ef59027849d458e8ae51edf4a954675237969cc42cc5cb988ad4b8cd48732e190026dd45e9b5e08b7117eafaed0f8610be9f317b873cee270f3a3925db34d96cd1945dc3a20308e281d32edcb39fb696cbe41b8b4e51e3dbb63aa7597afb12e16f069d555f1d721f4", 0xf1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="cc133afcb2ae9586732574cd29f4b7531fb21f937fd1", 0x16}, {&(0x7f00000021c0)="5a5894b0e2c58560232e08544695110f1e22a78e0919de614d046e3254abb1adf4d2168d879d3d7e66961e5fab2e2a2002b612e3157c6502c0b84ddafc4015151c27cba4b2513c5b447c25", 0x4b}, {&(0x7f0000002240)="7c33097ab86ff3320ddfc03df96d62cad1301f9b7c6fd9536dcd024c68b988ea7d7b513ca4d79d5c41fa466ecf89ae73e689baf162b81144bbaa6d957ea6ab7ddb74e5d69bfb7ed7bf5ab630b1289a49e0825f5dd79960b224d5e3428534409fdf9e4457cd69b0d62a3bf5d0eb3b3c6c684a597f79c4e03f5ed8664748ea7c59c8f3705c274c532474b1248fd9dd68b035a97a3f437280313315fb0483acd1e6bf1d308a9ad5fd85b5d42737fcc83307d59d401931e31f5abc749698a88c204499d0d9", 0xc3}, {&(0x7f0000002340)="536baf67535169a1496a1d9bd07f07b66668a0c371ae29da5f9f737fe98900f727682e7df78a6aaf3312669f854b016f0b64e4ac1479c9b72607512e8dcec94aea645b8d5bc7faa57494192b66458eb3d7e47f899086145cb9d3c898e9bc78357a5a881290863e6fcb353413a132c74370d7375a2ee035edad291e5c7bfbfdea54e7128725913065c36b5edca52ba01c7fa15f263909ceaf00be42e24089bfc46d8b28f0eea2f9b30c44cc2c0f4c2e60", 0xb0}, {&(0x7f0000002400)="0619e19dbece4820739b4e22af4386e8cf809cdc7c9064941e00ff1633c8a9d8aaca7a8c8020d80c58003a5af6b73e3d8778cd951ba945", 0x37}, {&(0x7f0000002440)="506f24dc86fd5b03455999e26649e82092dd0576c5bce24d7b375108b1e9f78605bece2ca552bb79c0b421aec7821cb384c5418535bd1409640aa2f344713d18930265cb3e3442b7f33d1845b9858c145274f5265e8497cba7f89a17e053ac87227e", 0x62}, {&(0x7f00000024c0)="c47fbc641c403a86a3374d0dd497ccb546cc8dffb868076a81bc6bff4900d2b7d9efa8aee6e99ef65636cab416ddc0d6d9f7127cbb322dc33e3b8447a0b03b914357044bfb81293f9f67565e9b934f8c81206433763079d2ef627dbcf89918da592a3d575b819d89bf1d68b323cbbd", 0x6f}], 0xa, 0x0, 0x0, 0x40000}}, {{&(0x7f0000002600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002680)="a327c9005b6cb5d8d3bba8db1321cafd02d6ba89e3be8630ba1ffb06c1f32bef8095054bb1a2689a57be44d59e222a9666b4abd0a55953ae5111f2a057774b539d1cd2e471fd5cf6f74673b84ab8188d11dc89b361a2c7b26900eb80125b7ab3bc70201b57c5a545369450e3d21a2f743419dfb0b02c852fd3d217bf", 0x7c}, {&(0x7f0000002700)="260665ab582174b755c43a006d79b77bb7da17087bea6b466bf770680135d07a125e19fb0495dc82cb232141a582ee70dc34e1397ff1cc094d928a14971f9e1efef07015426a05ade5117278ce1612a6788f3004416ad81ef6f173f3a0ede9b17bc727b7d29d615030f794a3f4b0895eaad618754f104ed761e85b1b068656e7956405f459497ea594b87a376aae3d98a82ba4e50be29bf5749d4046d1cc02c3c3b10e1a87b6f30ab491ce7f320ddbd4c8ad4edd26be4df18a499a442da51fbe0613f61840eea5596ae11abaca4b21f2", 0xd0}, {&(0x7f0000002800)="f5df3c7237b6ecae84b140c286aea8bb2202e1c4f337d74586e9db16a0d34d9ed669047758834bad5a0cc5209667c53ccac9a7373243fdff776a7b50d78447b52d2e74d5f97d97496fbe81831c855acd5b79b802fe48d1c2af9d43edc4b72aa4d38090a92ef6c1497fc53c4e9669774cc28c2b79ee88f9a2f9d816db033a3f2bf6b97ab813817dde28be9ba4115fe1979b86fed5d768f6c32bcc8f95989865651d0d096715660db76a7cecc30619dc03dbb38a9595781224ed5f5d8aa1", 0xbd}, {&(0x7f0000000680)="4594c0a0dc41280807b88a12700ed9a476d56d6058ee0eb51ba0fc09591e454f98daa41ea62e804f25daaf82c44014de02af02224bf8be3e9875830a1e018f0d63f1bae34155ffeca2be59259d95ff9cbe504bf14a0a71958a97d20ac08884634405c167f5ad56d24c48dc0705216852e9880c6c11b0419083f92fefb6fc1b710c6f23fbe58455efa0cee1c6a375", 0x8e}, {&(0x7f0000002980)="9e2bd1cbf0c30b02b9769a102d62e481bd1c80b56749bd42c1f8bda180274bbf2a4636ef658b122c52e06cc2ca8256fd73b9b1a8c15a1062d0f0e70209a0eb83182d320ed7bc7d4ba275165ceb77e91286f14541cfd95fc5609d09a8f7b26069b3ea8b3338884f5ded6b5d9f3bfb1583cd7f93e2270226bb0cfd7b8891532cd0b09a6e85eeb3a0d61dca318b003fdee6e1ad8c574a61015508", 0x99}], 0x5, &(0x7f0000003200)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="000000001cfc0008000000000000f55308ad7be266ffaef576d080195233dd37fad15a6a741094af91e6a88c4a371baf2c16c356f2bea2e0", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r13, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x20048000}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f80)="1857011e4be7b3cdcfee867dfc30071767b933bad3719e8ea0d48cc947496f3be310d6d672f86dfbaa7896dd5fed683e6021704b2361482f63df782b2619079d651ce91fff86ab2cda7d0551cda5f40036f4e4cc35bbc3a239e8cd490411aa06fcdcbf198718b374b8b71ea3ceac83777b58acf7b28c47b543c9d676700b2d1ce94431078f6a9de8ebe78680dc97b0eb41bd53e02193c36d728593", 0x9b}], 0x1, &(0x7f0000003080)=[@rights={{0x20, 0x1, 0x1, [r15, r4, r16, r3]}}], 0x20, 0x40805}}], 0x5, 0x20004060) 04:03:00 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) syz_io_uring_setup(0x1f29, &(0x7f0000000180)={0x0, 0xdc84, 0x8, 0x1, 0x2ff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x3, 0x2bf, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0xe83) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) shutdown(r4, 0x1) 04:03:00 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x2f4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) (async) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 32) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4000, @fd=r6, 0x4, &(0x7f0000000180)=""/232, 0xe8, 0x2, 0x1}, 0x2a) (async) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mknodat(r5, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 04:03:00 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) r7 = socket(0x15, 0xa, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="0100000000ffff69db0db900", @ANYRES32=r3, @ANYBLOB="148c0000000000002e2f66696c653000"]) r10 = inotify_init1(0x80000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$unix(r3, &(0x7f00000021c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="066df23979143874a9432c7f1a8e74900baf76f9aaf67549060a4d3bf75cab13961cb0680a40e610449b4b645b76ede45f467dca7eaa0b6350196e58c6ae853ba88f90da41bb116f0c8f513445c24898f5f5fa9782a6b192ccaf667b945110923b71dbbea574b680e25bd9059781e250d27643e1b165f4200067428f449dd782f3f3c3e46120c0d13e039ad4b33860c4d806d0165ce6fac8edeff5829e1204d743ba893bc82704f555da9d4ffb71c973ef77f86a0c640d08ddbdfc145579", 0xbe}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="0f1d5f3c5f8ff7366abccf6f80eca475a55d3637a8d4ffea114b3c3622674f9b8485188d70a289c53decea86a4e33299f7ad8cfbaf3f65ea18537cac8098044b37789bafbce78593d3bdc5221a1b3067a0091799184c3062a94efc6e4c5f53d19de7145d57ed0b39940aea2e949467303232bd78dc587ca2cb54390f945cf935dc0077e486d495093d654b3d68479fc9c45c26bb6520eb8b87db14f1e06dca320d191bafbf5a5e6bee29", 0xaa}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="0c1c884e16e9d38760d7bc1093f0f4cb5cd2ec66684d3a1ac3be1735434e9feca5a742cddc5bd07e012e290e2fd93382687c57fa80995cd6c25295c0cca7b39fd6fac2486b93e58196a0232ea51fe30c9da3eebb9707f3f7e733f743bcb7b8843823ab4c0292f3f93effb0be7c006ca769a7edbe472dda87a061cdd3de112648a56593ec9175cf89282a157ba64a09119185ac3378acfea1092cf59f5d695ef59f505b35118c2391", 0xa8}, {&(0x7f0000001680)="b4b2773d0bca7d9c071bbc8dd8f8235830c6871b109f78eb1f752288995bc894004aa375cb4e51172bc39b98d7cb619be1563187eefd1a9a1d05d8236724af5003f4666dbe68360c20001d381a25cb16588390578da01c8e7dfd3e", 0x5b}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x60, 0x40090}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001800)="06edbd194afb16d24987d549f04dab72862404702cbff2086a8374e4a2a497", 0x1f}, {&(0x7f0000001840)="b503f7e372ae6fcf7112d6e6af76a1de587fcfdf5fb12ce6b6a9465c9c32451c59bf0c711c282aee82e72f643d97a204bc7b5643847349f53b81ccda9cd097d88d232096c6acd96efe03358020766afe15c67514e388db5a4ba759fcd06954609f849bb6ca844d845b6f5d597113e3b8466d678bd4e5b9bdf751cec47cbc3c1d9c", 0x81}, {&(0x7f0000001900)="5d359d27ebb50f", 0x7}, {&(0x7f0000001940)="c6fe3cba1e48d7b6fda2ff57c9466c553e2eebb000fbaa3d925ae79965126987ce4618ffeab9e9c2f7ede32aa8cf4fe3b995b6ebe228d72a86e25bc87b2c4c6097c8d5dae5eb70743911984977a0d8221b1a1469bd21b295bdf721c3ef8dec599629952e097d1b33b75635175bc6c029719446377d679537cdc9a1636ab87c3f2cc7241b201a00d5eb86d6378f384c10bd587761", 0x94}, {&(0x7f0000001a00)="1472e3324631407f5cd9b0ab47f7b1e2421f62363828d512fbec5d2745", 0x1d}, {&(0x7f0000001a40)="1b6dc033d880d2fe73ce1e2e40c7ebe3f3563399382cfebeb225417d41ebf8dfffb8bb0eb9858066af9d39d7c79efc88e0e3b033a2c5165ddc8acf8e5ed291099dbcb8", 0x43}, {&(0x7f0000001ac0)="97a13dfa98212b7f7dbe2d955fc8ad8d5429e2c2959a8df6c2ec2a5a0597fd9499ac6df0749fccf1e9380968c51da719f093049217a99a24062e029754126168998c7200c1a5594e8c5250bd09b5db5a2baab6c6d43f9d6fffa8209c9b35c3fc2296179d0b30e11718da22984f146ef12eb29f2157cedd19fcbcb6e59bb3f874a1a93fa3e56ec60f9b13a76638c172ad11ad6b94e12742332dacc88e62eb9b1e6528a267a64b675af741363b49bbd9b23360864a96caf6420d842bcaf4ab2685d3479920f1ce5305064fae9fe2a5d67c170334f584212624399a52c2c746701fdc75", 0xe2}, {&(0x7f0000001bc0)="c04c214aa90ce56f64551521b2abcbf6f9e339ba24b3ce6697630702aeffe1474ae4a257055293f73a39417e68391687bb42c2452a989c9462fe2eadcb94e0d85b10a1d94ac885a6adf1f9640200ce90f93a82bb6e858ec4357a008b0377bcd9851026f9ece8c08ea5e025e456c8909d3f9d61abc2f077a9bfc4705ac070", 0x7e}, {&(0x7f0000001c40)="5de647b6a5c39bf3ff0a6878d54688bb30ddc1566c7d80e879805ab580e63956b99603bfb3a3c9c65bc7c38562d45ad150efe6c69989c1013d9ff97245346abc0d2da4a1e5da26ac623cf68744bc7b0f09890d8dfe2d5d0daa669e8cf7b0dfc5d3735e413b81ff0c06ec46fdb92d66294cbb9a3e1c7740450f8ef9572ffb19a04240240e86d999ffd6a86bec32b8", 0x8e}], 0x9, 0x0, 0x0, 0x4045}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)="3980cb35cc8efced60f1d55e19460881d80383935f327160149f39a55797360b9b5136c167fa915e678e464a3758a22f96a9a02df58878c7225061b2c9be1b20d958503f574c199a3c83054f90841fd37110ab5b998798b6d5694ae554ad1915cbbf329a28026a145e48988fd47bc0c5055608b52a2ef5543685247ab41fdd423684a33f9d5c6849b0381973082c0cd5c43e8010eaa885d30e254fec5d26226330254e41cb", 0xa5}, {&(0x7f0000001f00)="3ead4e7fbdded02f1526d734f780a89585a19f9c2d38e8ce", 0x18}, {&(0x7f0000001f40)="39b3f3213c65ec11235bd36feded9de8c4341d3bd10d53d904703a0dab749b66abf068c9f61cc922256d80fe1946c738c12b249480b41e8d2b5c92657a941255b79d4dd10f73e7bb796aecbdc8f8fc4812a6eb6a71", 0x55}, {&(0x7f0000001fc0)="96aa3a91b28ebd72e8e97554240bdf96338890525bbe6ab8ce256ffd3f5d49d6912fdaafa8822aa1da663706e10038d81cf48b0445b875edb23d86fae42e1c5b615f325d6a9bf6b7584c93ec9bb7a3f94320d768879b59836715298d6e8b1b211da0fa74acadc6e4ae964f134b1dc7", 0x6f}], 0x4, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}], 0x68, 0x10000000}}], 0x5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002080), &(0x7f00000020c0)=0xc) (async) socket(0x15, 0xa, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="0100000000ffff69db0db900", @ANYRES32=r3, @ANYBLOB="148c0000000000002e2f66696c653000"]) (async) inotify_init1(0x80000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r11, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) sendmmsg$unix(r3, &(0x7f00000021c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="066df23979143874a9432c7f1a8e74900baf76f9aaf67549060a4d3bf75cab13961cb0680a40e610449b4b645b76ede45f467dca7eaa0b6350196e58c6ae853ba88f90da41bb116f0c8f513445c24898f5f5fa9782a6b192ccaf667b945110923b71dbbea574b680e25bd9059781e250d27643e1b165f4200067428f449dd782f3f3c3e46120c0d13e039ad4b33860c4d806d0165ce6fac8edeff5829e1204d743ba893bc82704f555da9d4ffb71c973ef77f86a0c640d08ddbdfc145579", 0xbe}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="0f1d5f3c5f8ff7366abccf6f80eca475a55d3637a8d4ffea114b3c3622674f9b8485188d70a289c53decea86a4e33299f7ad8cfbaf3f65ea18537cac8098044b37789bafbce78593d3bdc5221a1b3067a0091799184c3062a94efc6e4c5f53d19de7145d57ed0b39940aea2e949467303232bd78dc587ca2cb54390f945cf935dc0077e486d495093d654b3d68479fc9c45c26bb6520eb8b87db14f1e06dca320d191bafbf5a5e6bee29", 0xaa}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="0c1c884e16e9d38760d7bc1093f0f4cb5cd2ec66684d3a1ac3be1735434e9feca5a742cddc5bd07e012e290e2fd93382687c57fa80995cd6c25295c0cca7b39fd6fac2486b93e58196a0232ea51fe30c9da3eebb9707f3f7e733f743bcb7b8843823ab4c0292f3f93effb0be7c006ca769a7edbe472dda87a061cdd3de112648a56593ec9175cf89282a157ba64a09119185ac3378acfea1092cf59f5d695ef59f505b35118c2391", 0xa8}, {&(0x7f0000001680)="b4b2773d0bca7d9c071bbc8dd8f8235830c6871b109f78eb1f752288995bc894004aa375cb4e51172bc39b98d7cb619be1563187eefd1a9a1d05d8236724af5003f4666dbe68360c20001d381a25cb16588390578da01c8e7dfd3e", 0x5b}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x60, 0x40090}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001800)="06edbd194afb16d24987d549f04dab72862404702cbff2086a8374e4a2a497", 0x1f}, {&(0x7f0000001840)="b503f7e372ae6fcf7112d6e6af76a1de587fcfdf5fb12ce6b6a9465c9c32451c59bf0c711c282aee82e72f643d97a204bc7b5643847349f53b81ccda9cd097d88d232096c6acd96efe03358020766afe15c67514e388db5a4ba759fcd06954609f849bb6ca844d845b6f5d597113e3b8466d678bd4e5b9bdf751cec47cbc3c1d9c", 0x81}, {&(0x7f0000001900)="5d359d27ebb50f", 0x7}, {&(0x7f0000001940)="c6fe3cba1e48d7b6fda2ff57c9466c553e2eebb000fbaa3d925ae79965126987ce4618ffeab9e9c2f7ede32aa8cf4fe3b995b6ebe228d72a86e25bc87b2c4c6097c8d5dae5eb70743911984977a0d8221b1a1469bd21b295bdf721c3ef8dec599629952e097d1b33b75635175bc6c029719446377d679537cdc9a1636ab87c3f2cc7241b201a00d5eb86d6378f384c10bd587761", 0x94}, {&(0x7f0000001a00)="1472e3324631407f5cd9b0ab47f7b1e2421f62363828d512fbec5d2745", 0x1d}, {&(0x7f0000001a40)="1b6dc033d880d2fe73ce1e2e40c7ebe3f3563399382cfebeb225417d41ebf8dfffb8bb0eb9858066af9d39d7c79efc88e0e3b033a2c5165ddc8acf8e5ed291099dbcb8", 0x43}, {&(0x7f0000001ac0)="97a13dfa98212b7f7dbe2d955fc8ad8d5429e2c2959a8df6c2ec2a5a0597fd9499ac6df0749fccf1e9380968c51da719f093049217a99a24062e029754126168998c7200c1a5594e8c5250bd09b5db5a2baab6c6d43f9d6fffa8209c9b35c3fc2296179d0b30e11718da22984f146ef12eb29f2157cedd19fcbcb6e59bb3f874a1a93fa3e56ec60f9b13a76638c172ad11ad6b94e12742332dacc88e62eb9b1e6528a267a64b675af741363b49bbd9b23360864a96caf6420d842bcaf4ab2685d3479920f1ce5305064fae9fe2a5d67c170334f584212624399a52c2c746701fdc75", 0xe2}, {&(0x7f0000001bc0)="c04c214aa90ce56f64551521b2abcbf6f9e339ba24b3ce6697630702aeffe1474ae4a257055293f73a39417e68391687bb42c2452a989c9462fe2eadcb94e0d85b10a1d94ac885a6adf1f9640200ce90f93a82bb6e858ec4357a008b0377bcd9851026f9ece8c08ea5e025e456c8909d3f9d61abc2f077a9bfc4705ac070", 0x7e}, {&(0x7f0000001c40)="5de647b6a5c39bf3ff0a6878d54688bb30ddc1566c7d80e879805ab580e63956b99603bfb3a3c9c65bc7c38562d45ad150efe6c69989c1013d9ff97245346abc0d2da4a1e5da26ac623cf68744bc7b0f09890d8dfe2d5d0daa669e8cf7b0dfc5d3735e413b81ff0c06ec46fdb92d66294cbb9a3e1c7740450f8ef9572ffb19a04240240e86d999ffd6a86bec32b8", 0x8e}], 0x9, 0x0, 0x0, 0x4045}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)="3980cb35cc8efced60f1d55e19460881d80383935f327160149f39a55797360b9b5136c167fa915e678e464a3758a22f96a9a02df58878c7225061b2c9be1b20d958503f574c199a3c83054f90841fd37110ab5b998798b6d5694ae554ad1915cbbf329a28026a145e48988fd47bc0c5055608b52a2ef5543685247ab41fdd423684a33f9d5c6849b0381973082c0cd5c43e8010eaa885d30e254fec5d26226330254e41cb", 0xa5}, {&(0x7f0000001f00)="3ead4e7fbdded02f1526d734f780a89585a19f9c2d38e8ce", 0x18}, {&(0x7f0000001f40)="39b3f3213c65ec11235bd36feded9de8c4341d3bd10d53d904703a0dab749b66abf068c9f61cc922256d80fe1946c738c12b249480b41e8d2b5c92657a941255b79d4dd10f73e7bb796aecbdc8f8fc4812a6eb6a71", 0x55}, {&(0x7f0000001fc0)="96aa3a91b28ebd72e8e97554240bdf96338890525bbe6ab8ce256ffd3f5d49d6912fdaafa8822aa1da663706e10038d81cf48b0445b875edb23d86fae42e1c5b615f325d6a9bf6b7584c93ec9bb7a3f94320d768879b59836715298d6e8b1b211da0fa74acadc6e4ae964f134b1dc7", 0x6f}], 0x4, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}], 0x68, 0x10000000}}], 0x5, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000dd000/0x1000)=nil, 0x1000, 0x1, 0x4010, r5, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r10, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r10, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1}, 0x7) shutdown(r3, 0x1) [ 483.220729][T19164] loop0: detected capacity change from 0 to 270 04:03:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000dd000/0x1000)=nil, 0x1000, 0x1, 0x4010, r5, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r10, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r10, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1}, 0x7) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) mmap$IORING_OFF_SQES(&(0x7f00000dd000/0x1000)=nil, 0x1000, 0x1, 0x4010, r5, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r10, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r10, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r10, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r10, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1}, 0x7) (async) shutdown(r3, 0x1) (async) 04:03:00 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) r7 = socket(0x15, 0xa, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="0100000000ffff69db0db900", @ANYRES32=r3, @ANYBLOB="148c0000000000002e2f66696c653000"]) r10 = inotify_init1(0x80000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$unix(r3, &(0x7f00000021c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="066df23979143874a9432c7f1a8e74900baf76f9aaf67549060a4d3bf75cab13961cb0680a40e610449b4b645b76ede45f467dca7eaa0b6350196e58c6ae853ba88f90da41bb116f0c8f513445c24898f5f5fa9782a6b192ccaf667b945110923b71dbbea574b680e25bd9059781e250d27643e1b165f4200067428f449dd782f3f3c3e46120c0d13e039ad4b33860c4d806d0165ce6fac8edeff5829e1204d743ba893bc82704f555da9d4ffb71c973ef77f86a0c640d08ddbdfc145579", 0xbe}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="0f1d5f3c5f8ff7366abccf6f80eca475a55d3637a8d4ffea114b3c3622674f9b8485188d70a289c53decea86a4e33299f7ad8cfbaf3f65ea18537cac8098044b37789bafbce78593d3bdc5221a1b3067a0091799184c3062a94efc6e4c5f53d19de7145d57ed0b39940aea2e949467303232bd78dc587ca2cb54390f945cf935dc0077e486d495093d654b3d68479fc9c45c26bb6520eb8b87db14f1e06dca320d191bafbf5a5e6bee29", 0xaa}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="0c1c884e16e9d38760d7bc1093f0f4cb5cd2ec66684d3a1ac3be1735434e9feca5a742cddc5bd07e012e290e2fd93382687c57fa80995cd6c25295c0cca7b39fd6fac2486b93e58196a0232ea51fe30c9da3eebb9707f3f7e733f743bcb7b8843823ab4c0292f3f93effb0be7c006ca769a7edbe472dda87a061cdd3de112648a56593ec9175cf89282a157ba64a09119185ac3378acfea1092cf59f5d695ef59f505b35118c2391", 0xa8}, {&(0x7f0000001680)="b4b2773d0bca7d9c071bbc8dd8f8235830c6871b109f78eb1f752288995bc894004aa375cb4e51172bc39b98d7cb619be1563187eefd1a9a1d05d8236724af5003f4666dbe68360c20001d381a25cb16588390578da01c8e7dfd3e", 0x5b}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x60, 0x40090}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001800)="06edbd194afb16d24987d549f04dab72862404702cbff2086a8374e4a2a497", 0x1f}, {&(0x7f0000001840)="b503f7e372ae6fcf7112d6e6af76a1de587fcfdf5fb12ce6b6a9465c9c32451c59bf0c711c282aee82e72f643d97a204bc7b5643847349f53b81ccda9cd097d88d232096c6acd96efe03358020766afe15c67514e388db5a4ba759fcd06954609f849bb6ca844d845b6f5d597113e3b8466d678bd4e5b9bdf751cec47cbc3c1d9c", 0x81}, {&(0x7f0000001900)="5d359d27ebb50f", 0x7}, {&(0x7f0000001940)="c6fe3cba1e48d7b6fda2ff57c9466c553e2eebb000fbaa3d925ae79965126987ce4618ffeab9e9c2f7ede32aa8cf4fe3b995b6ebe228d72a86e25bc87b2c4c6097c8d5dae5eb70743911984977a0d8221b1a1469bd21b295bdf721c3ef8dec599629952e097d1b33b75635175bc6c029719446377d679537cdc9a1636ab87c3f2cc7241b201a00d5eb86d6378f384c10bd587761", 0x94}, {&(0x7f0000001a00)="1472e3324631407f5cd9b0ab47f7b1e2421f62363828d512fbec5d2745", 0x1d}, {&(0x7f0000001a40)="1b6dc033d880d2fe73ce1e2e40c7ebe3f3563399382cfebeb225417d41ebf8dfffb8bb0eb9858066af9d39d7c79efc88e0e3b033a2c5165ddc8acf8e5ed291099dbcb8", 0x43}, {&(0x7f0000001ac0)="97a13dfa98212b7f7dbe2d955fc8ad8d5429e2c2959a8df6c2ec2a5a0597fd9499ac6df0749fccf1e9380968c51da719f093049217a99a24062e029754126168998c7200c1a5594e8c5250bd09b5db5a2baab6c6d43f9d6fffa8209c9b35c3fc2296179d0b30e11718da22984f146ef12eb29f2157cedd19fcbcb6e59bb3f874a1a93fa3e56ec60f9b13a76638c172ad11ad6b94e12742332dacc88e62eb9b1e6528a267a64b675af741363b49bbd9b23360864a96caf6420d842bcaf4ab2685d3479920f1ce5305064fae9fe2a5d67c170334f584212624399a52c2c746701fdc75", 0xe2}, {&(0x7f0000001bc0)="c04c214aa90ce56f64551521b2abcbf6f9e339ba24b3ce6697630702aeffe1474ae4a257055293f73a39417e68391687bb42c2452a989c9462fe2eadcb94e0d85b10a1d94ac885a6adf1f9640200ce90f93a82bb6e858ec4357a008b0377bcd9851026f9ece8c08ea5e025e456c8909d3f9d61abc2f077a9bfc4705ac070", 0x7e}, {&(0x7f0000001c40)="5de647b6a5c39bf3ff0a6878d54688bb30ddc1566c7d80e879805ab580e63956b99603bfb3a3c9c65bc7c38562d45ad150efe6c69989c1013d9ff97245346abc0d2da4a1e5da26ac623cf68744bc7b0f09890d8dfe2d5d0daa669e8cf7b0dfc5d3735e413b81ff0c06ec46fdb92d66294cbb9a3e1c7740450f8ef9572ffb19a04240240e86d999ffd6a86bec32b8", 0x8e}], 0x9, 0x0, 0x0, 0x4045}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)="3980cb35cc8efced60f1d55e19460881d80383935f327160149f39a55797360b9b5136c167fa915e678e464a3758a22f96a9a02df58878c7225061b2c9be1b20d958503f574c199a3c83054f90841fd37110ab5b998798b6d5694ae554ad1915cbbf329a28026a145e48988fd47bc0c5055608b52a2ef5543685247ab41fdd423684a33f9d5c6849b0381973082c0cd5c43e8010eaa885d30e254fec5d26226330254e41cb", 0xa5}, {&(0x7f0000001f00)="3ead4e7fbdded02f1526d734f780a89585a19f9c2d38e8ce", 0x18}, {&(0x7f0000001f40)="39b3f3213c65ec11235bd36feded9de8c4341d3bd10d53d904703a0dab749b66abf068c9f61cc922256d80fe1946c738c12b249480b41e8d2b5c92657a941255b79d4dd10f73e7bb796aecbdc8f8fc4812a6eb6a71", 0x55}, {&(0x7f0000001fc0)="96aa3a91b28ebd72e8e97554240bdf96338890525bbe6ab8ce256ffd3f5d49d6912fdaafa8822aa1da663706e10038d81cf48b0445b875edb23d86fae42e1c5b615f325d6a9bf6b7584c93ec9bb7a3f94320d768879b59836715298d6e8b1b211da0fa74acadc6e4ae964f134b1dc7", 0x6f}], 0x4, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}], 0x68, 0x10000000}}], 0x5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002080), &(0x7f00000020c0)=0xc) (async) socket(0x15, 0xa, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="0100000000ffff69db0db900", @ANYRES32=r3, @ANYBLOB="148c0000000000002e2f66696c653000"]) (async) inotify_init1(0x80000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r11, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) sendmmsg$unix(r3, &(0x7f00000021c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="066df23979143874a9432c7f1a8e74900baf76f9aaf67549060a4d3bf75cab13961cb0680a40e610449b4b645b76ede45f467dca7eaa0b6350196e58c6ae853ba88f90da41bb116f0c8f513445c24898f5f5fa9782a6b192ccaf667b945110923b71dbbea574b680e25bd9059781e250d27643e1b165f4200067428f449dd782f3f3c3e46120c0d13e039ad4b33860c4d806d0165ce6fac8edeff5829e1204d743ba893bc82704f555da9d4ffb71c973ef77f86a0c640d08ddbdfc145579", 0xbe}, {&(0x7f0000000680)="f22516917650ce5ddbf2d45772ad6506f1f3200b490cb1908b6e9f733fee50b8e34041a125ec74404dca51c93b8550aa5c24c4003c9406422d2412ef2b9402f312671cdaa630e6046d8b5caa12907f8311412d0da8b0689b5687e2e48ae30d2db72812b44a62360ecddfb85aba87085e372d6980925951600c723b3679605a2ff9c991ebe2eb046a657569ddd173b6e37b7146e86f595b7f19257d3c16889b92b1d909ad7fa192da770378691ab248ba117ee701d106b70fdc218cb0ac430e1aafe3892a05c21bef3b8fe82eeca70e8ccbfb402be3ed322b0cc441499fda3f32f9f73906e9ac1767f9a0d8ff641d424892b06c960b657368fef61559acba9ac3e0e48438a95003327c1a9eef29f78adc021c6af401ada760e95dc822db15432c120d1fcb8184b4a82b06c3dcb8c85f7799a0627300dcd53e2321e8c480d61bd8c17f98b63726ac4867f1b86ed382c063c899a9505c463b50ccc06fb8a65d02bb3cd05b72e6a8734ad09cdc45d31a87a2573742ccc294b65709bb9d996f31bc030376fcc562634863bbcc5f5a262160a0f84cbeb41cb9200546fa495d7e907923d5b5eb5a21e4029eab983f0bb1a6944a09ab840023c9a79d27b3fbd4152d49656b798828e8e24a535a417c029e91a25498796134356912355e945596b327509e1da53dfb3d52fac17d400a049137d0342c9179dfb77b78c6cd75352a10f659b4235056e04d8c47cf42038e963bfd8c1107c295e92dca506a750c5f3bc6abeb7ea0e67e8ab4d2ebabfabd1100829fed49fd296a05c54a71a49eaea4d5e08f0b1901d5698a78f531afdc721c598ef3c693d02b8bfdc340046a457b4632f4aad1b388df2b20a12ba41643a017e2660b63f4af5ddca47e9738feb970101c3424d26be398d868b837d503225a85d91ebfdb1828c777395969a67588cebb8bef28147208152665e403bd8d90a2a55ceefe138a6502c2930b898059268e7dc9efbfd44b731c60ce6259d8757ce00db65c1e8b8192d5fa1b82394356c59677f563f8c09c1d2964442039d377aac771270a6a0bcb0f638ead5498d213e7fa7c208c2cc9820d363ff9804a55efca46df4fdc58b06b320b5228e6059b23f0ceb43bda49183cf491ed9aab49ba8cfa5d3b4be3d538b67ae0126177e7fef7703b06b0dbc1d1e740363053b1dcb26b4576ad08f322d89ec96d6c74efec5d2fa6f2ccc91428b7a6775464354dc7738084e36a6f2a7f86d3d0f2d32ccd488b8d740bc3f2f7a9387502ce285d29324063047c4cc8e4939b6c0c450cd9448e76f8250a1f05b03a989c97c07eaf6005b10d67413c8f0eaf8bdc0cb26683ac1f548a4d005b4bb9f0ba505bc174a83c7fd450f503d450e477622c83b6e8226319b1e2301a797de718228ef88e9a5d7eca9dff2325f09d16c399b8e8dbdd81fd403f1972f425f0b7848ee080fabeaf9157377dac26052ec72077d32d913662c328e77da3c61af57d26bd1ce5ba343a0b3159f6646cd152cc7c9db0b556c52204be7e18204ff4ee733373555cb7db50b472a97b387a3f98e8acf5fe79ba16e7cf29a37fe07aa1befe4dd6fbee204eb90137bb9f33348808c6a039be690c3e91009e31e88de31f311b15fd26ba4e7c88ffb9f3864b850c4591e5f3369f6cd4eea89bd6de11a9522d57f0ac9d4175d084ce763e526b4264adf976cd69c823bd42ef6470f689ae733139df6313bb38d207ae5036972b64e2c1571ce469ad3766f340747d8ec1051f0874b7e245c45c1ea15a391cd33db5f3983dc2314b566fc8f4c6254026cddfb0dfc52b35a2cd0e41c285bbcdcfbc175013eecb0ff4e3438ec93811b05e0b29f0f5ed9b6bebef8d6099bc9b9e645eb07c771308a74ff1e0d5b6744e881e8cdc61344b8c18bbd91a9ae55cd83529e09277ff597efe83b9ea6430e986859075b59accc5b22e0234b8b3973224196ec5c0c97e16afb80907404835bf9c5bab6ee76f6351dedc2e4f56a7eadaba2a2c46c82f020654cc7806cdb0f46ffdb163c25236e80663cd346dcfc085cb5a061b55bfb246502f8f750aadeabf712ba6e445370b78d6b11d45be2c580b0a62e5f4d9f41e9eb1c0b333058f65a04f3adeaaa3ee57da6b9092e638d6958f2680d8820a0ecd049b1024ef8ad135632fd03142dd5cbba3d3d55fc80bd51e28fa7833a7670a6ebf8f510742543392ede1d9451bcf17630a03a81b6ab658ebca480d62a662df7ad46c4fc7efa1d8b0c3b26d7ece7ed82d639036979fde8b3e5481124dab447c7a77f8e4450197b79c98259cf1a81d05822e83e75e7f7e779af687210432b67be362ec3c855b946b1b77c019a2bc34e0b546a4d3cb9ec43b7b53671892c0173f3a3cdfef8f92841579aba859d34b7b3bb7a23579a9282fe21e64661979e9de02eb1e94fc6246ee83b78faf6fdae795f77db093262b7d965967ebf72ccbd919ce3fd2190f708652fdbe58aa3c4a72d8f92539b3afe66d828217645943c12930b033e9bf5fc632530cc53e2afc5fea2c5d3b25f548ad65645b5603da6d239d84420ab51aa13f27ebc9180d8c6a6ebc55db3ba89ef264c37a263a403e1771707fb2d9ba27e811c9a21c4b2b3fc69b24ab82e8ee8b4f948c4bc0790afccf40bb8472706b26c181ee0ea67f0479c1381a8af55c40a32e87120fd8792153f36baec06e1971f993dc42c20d41d3083780105ba770d1fd582875e9f404d7125e7e006db157c94f4b23bc7e99f2f0a2ef371e9c797485c8f8ab68ad1ffbd683de82b3def33a102034fc6313931207ebeca9ef9e78ceb0d0c3ff96fea21be9b4c9dda0a75f7594604c2f33bede8f278752d83ac1883191b1f53ebfdcf9e79912d568913b08fb2b8d8027ed3b327687620ba7837c66983a4c8c933301149290983118b4a9dea38b5584bdb8134e1ac72f805268d58fbbe06637e6fe5444d52270725f48b07479ec6851266a52dfc68a7b1cc2155ed68c454abacf499f37ac71ab1749a632798683ffaf3e1f5e8123a8da2e111e1740164440858a8dc42dcf797dac689f25f9b4eb91ab70db46a2c65bfb990e3bc623781d1914fd929aaed88ae06adde2f0d57bdd20c547c94d99b8b644912dfcd89b15e7ffe7ea0148bcee7302ef9b7b9b17f16c6a0ef9422049b721727586a0b96121bef87fb47bdbad8a9928f01e606a82dabaed561e93011919db03578612805ca619682ceaf46f3a32f73f1a12ef79fbc510814087c2d555a58ff2e520e4ccf2aa31a437a856d05997dda0dcf5858567852d36aed382b7b8a442ff7318aeac278f37b2810253127b3912f4fb596b361461d4f0d6bd38fb139d7f5ebbe43741d5ad2d9c4fbfa8ed6a4420ce3c46f2c592c04ca411ec23566475d76e0b0275036e9f7ccbad15a27ab485fd16fdcc956121f530e580ad7657dd3b5ce3eb69be7a60a152def66eea0281e204736d098eed9fde9f052bdd9faee6d917517b8f8964d8c4072cb5529389c6a4b585854cb26f49063ba980d6f9a8c8c168343a0a2670f758949af121091a996b0a14de24460ed2d21b51d4c176881d8092d1a9007907db53d81315cb088706f12c398157f4c3d825f6658be8688e612ad4e67639af69ee818e092ca835e1d02b296d7599ffd70702cb66a19abceae26083c94acb93fe531856f03545d124d2a2580cdd13c00e21bbef83e2b4c132a2a3c164cc361bf467a612c92e969a32e2acb055c64c203f3d013badc33dfada63f1a62c76bfc2585ecd0cd93845ed37e8f50e0887bfac53a6faf400896529f1957cb57d6865a1251c025b68cb7f02ba2cffabce42341932f44d0aa40461c1cac90c5e20358268657ae52959d5757dd75b58852f9a22c203eb5cc4b76bd5b115ad6f7fe497a464f2858d47c1330e9b2678413e159dda2f1f24e3e93f0bcd67ace1f567a32319ea6986efeb304f675c2460a761fdaf8bf04f83b8749e5adf18a240bc36bd677e308fd8c025de508d31247cd42dc481f2d5c75a5aec9c036ec87e99f29e9ef4155260f8c5fb4a1a1c7669747c8973e7aa3516d90e05ac0fc947eb3eaea5af92f0941db53b231b6dd623fb6499e2dc77bcb016b978275251f16cf0d7729f9576aa1912ea6fa67356190d547240928321fc452ade8b03bbacbafca6db2af58121366bd3e2ddad7602dd78a52ba870b0d7d39bb687f0f23225047a1557ac5e67b37a76efe021e95963ad4e2c0ee9da9a672747fb25c7893a45f8cbe24c32c79031102531a2672771cd0e50659aaa867cb02c0585e8b672c86fa9657861d425297e5c5590c177c2e0aef5cfe98fe568d4adb1078a4826f5160eef1642fe77f9dd8c39f0c8148be529f1ee68df46f542bb0919ed79961469a6b44935f9e6e50967cfa762cc1feef5ddbd0d8962e9a3077cc23a2324321417d00c91a593ea064e337361b21069b2211a7817504ddd6ae7270786b36d43aba0af04d66485263980591527259e98478254fb86d23c1b00e0152f75822015b5d5470e1204f0b4f50adc4eb5fb9842347c39017edfcf493436d295e2448d8fd2618f2bc4101a48ec0d3ce6f2c8035c99ba21c8c0365dc2070125b3d3bab3f01ccfad965e88b21eb516515a2a80a5c832a0c17f332fb3d75b3b4f50dd64cc2b9768b1d7f6ffe6e24f28eee251522188431e3e47716391780da3685e988f49decb1cc7416fc098f5ed069d561617816f7180cb8b8bc6719b84a794ff4f3cdc24d84250ffa203154ec6d9d95f6d0b7307ded69cb45070ad3b24faa742ffc787b0092d00aa25b96b5751472a95ada4aa141e44673768b6053b4b04febe64b136c9dd517cfa91ba910a13284fa637168c2d6889f03c36fbe15a53fd014bebee7ff884e385c3c4056c2fba9fd42a81d57ae610ffef64847c786d3e69f28784cbd4a748e08b02496a1d7defe3c9c32afff9c8b3eecf664ebf74b42bc984f99709817b84ec0b1234b00ed0629d77d0cde6a422969025c6a4b2faf3b038374d9f545e31ccee4d7c7cda0bdeccdd5d85bcb146aad80e6b8f4f9c2a8e52ff00c27e07d9127a764442c187bb3ed77456e3d487706ac8247f74909bce81d0876dc59e113c48f9abc6c3576d13a46215d8a42480df444c490f5e50089dc0d4438a0665f3f32979a6464519c8d182604e7804979088ff73e9dbf6790e4851bf25f4dc9c37ecd00a3552564dabb47c34289037af2cc5c1ae07426a627000864dce326893b1ada1960e3e3a722fe1c663bbcca9aeb80d6eee62a1934d26ef0f3636620e4ea6088ffde00c800917667fbc71dc5339943487c86359a3539747886516eb50769742a56963f3a5cad4e6ae3485dfac1e35a1c9fdd9e892e571cc0eb077cced52edfb5af8de9e37cb9467f0fd8d86ec48379793ad05efcc5b4b243f159f723fc94a40190b68392f9f6ae4179b8fe6f38b826473cc9b3e04791f49c340fc282a9d88788d3a75bbddfc42b9849821e1984644d96ee9bb2bfaf30b456edfb165b508f1ab77acfe20065e36eaece9c325db59877c3748b8edb7a9ab41df25c9ac1193e06e541b3a2b4bb6110335575d7b0af31ea75d50d5c1de1dbe463924c927df748c519d04ff06e56e78bfc760272ea07407b88b7733c38faa206a05c00bfdcc713668169cee0cc64db87e405660cb0fb3f8ba27d3651774360e52b283ba304005705e11d8445dea5de4a15ab0b4bc226703c4ab2f5a9f29a1ac2e3aab35d0ca9a9d2e26ad839cac9851a086ae84a14ec3cdd40b5ae84322b44402a659ef140ab71ddedf743908393679c91323df629c3fc312f407dbce88ef14", 0x1000}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="0f1d5f3c5f8ff7366abccf6f80eca475a55d3637a8d4ffea114b3c3622674f9b8485188d70a289c53decea86a4e33299f7ad8cfbaf3f65ea18537cac8098044b37789bafbce78593d3bdc5221a1b3067a0091799184c3062a94efc6e4c5f53d19de7145d57ed0b39940aea2e949467303232bd78dc587ca2cb54390f945cf935dc0077e486d495093d654b3d68479fc9c45c26bb6520eb8b87db14f1e06dca320d191bafbf5a5e6bee29", 0xaa}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="0c1c884e16e9d38760d7bc1093f0f4cb5cd2ec66684d3a1ac3be1735434e9feca5a742cddc5bd07e012e290e2fd93382687c57fa80995cd6c25295c0cca7b39fd6fac2486b93e58196a0232ea51fe30c9da3eebb9707f3f7e733f743bcb7b8843823ab4c0292f3f93effb0be7c006ca769a7edbe472dda87a061cdd3de112648a56593ec9175cf89282a157ba64a09119185ac3378acfea1092cf59f5d695ef59f505b35118c2391", 0xa8}, {&(0x7f0000001680)="b4b2773d0bca7d9c071bbc8dd8f8235830c6871b109f78eb1f752288995bc894004aa375cb4e51172bc39b98d7cb619be1563187eefd1a9a1d05d8236724af5003f4666dbe68360c20001d381a25cb16588390578da01c8e7dfd3e", 0x5b}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x60, 0x40090}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001800)="06edbd194afb16d24987d549f04dab72862404702cbff2086a8374e4a2a497", 0x1f}, {&(0x7f0000001840)="b503f7e372ae6fcf7112d6e6af76a1de587fcfdf5fb12ce6b6a9465c9c32451c59bf0c711c282aee82e72f643d97a204bc7b5643847349f53b81ccda9cd097d88d232096c6acd96efe03358020766afe15c67514e388db5a4ba759fcd06954609f849bb6ca844d845b6f5d597113e3b8466d678bd4e5b9bdf751cec47cbc3c1d9c", 0x81}, {&(0x7f0000001900)="5d359d27ebb50f", 0x7}, {&(0x7f0000001940)="c6fe3cba1e48d7b6fda2ff57c9466c553e2eebb000fbaa3d925ae79965126987ce4618ffeab9e9c2f7ede32aa8cf4fe3b995b6ebe228d72a86e25bc87b2c4c6097c8d5dae5eb70743911984977a0d8221b1a1469bd21b295bdf721c3ef8dec599629952e097d1b33b75635175bc6c029719446377d679537cdc9a1636ab87c3f2cc7241b201a00d5eb86d6378f384c10bd587761", 0x94}, {&(0x7f0000001a00)="1472e3324631407f5cd9b0ab47f7b1e2421f62363828d512fbec5d2745", 0x1d}, {&(0x7f0000001a40)="1b6dc033d880d2fe73ce1e2e40c7ebe3f3563399382cfebeb225417d41ebf8dfffb8bb0eb9858066af9d39d7c79efc88e0e3b033a2c5165ddc8acf8e5ed291099dbcb8", 0x43}, {&(0x7f0000001ac0)="97a13dfa98212b7f7dbe2d955fc8ad8d5429e2c2959a8df6c2ec2a5a0597fd9499ac6df0749fccf1e9380968c51da719f093049217a99a24062e029754126168998c7200c1a5594e8c5250bd09b5db5a2baab6c6d43f9d6fffa8209c9b35c3fc2296179d0b30e11718da22984f146ef12eb29f2157cedd19fcbcb6e59bb3f874a1a93fa3e56ec60f9b13a76638c172ad11ad6b94e12742332dacc88e62eb9b1e6528a267a64b675af741363b49bbd9b23360864a96caf6420d842bcaf4ab2685d3479920f1ce5305064fae9fe2a5d67c170334f584212624399a52c2c746701fdc75", 0xe2}, {&(0x7f0000001bc0)="c04c214aa90ce56f64551521b2abcbf6f9e339ba24b3ce6697630702aeffe1474ae4a257055293f73a39417e68391687bb42c2452a989c9462fe2eadcb94e0d85b10a1d94ac885a6adf1f9640200ce90f93a82bb6e858ec4357a008b0377bcd9851026f9ece8c08ea5e025e456c8909d3f9d61abc2f077a9bfc4705ac070", 0x7e}, {&(0x7f0000001c40)="5de647b6a5c39bf3ff0a6878d54688bb30ddc1566c7d80e879805ab580e63956b99603bfb3a3c9c65bc7c38562d45ad150efe6c69989c1013d9ff97245346abc0d2da4a1e5da26ac623cf68744bc7b0f09890d8dfe2d5d0daa669e8cf7b0dfc5d3735e413b81ff0c06ec46fdb92d66294cbb9a3e1c7740450f8ef9572ffb19a04240240e86d999ffd6a86bec32b8", 0x8e}], 0x9, 0x0, 0x0, 0x4045}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)="3980cb35cc8efced60f1d55e19460881d80383935f327160149f39a55797360b9b5136c167fa915e678e464a3758a22f96a9a02df58878c7225061b2c9be1b20d958503f574c199a3c83054f90841fd37110ab5b998798b6d5694ae554ad1915cbbf329a28026a145e48988fd47bc0c5055608b52a2ef5543685247ab41fdd423684a33f9d5c6849b0381973082c0cd5c43e8010eaa885d30e254fec5d26226330254e41cb", 0xa5}, {&(0x7f0000001f00)="3ead4e7fbdded02f1526d734f780a89585a19f9c2d38e8ce", 0x18}, {&(0x7f0000001f40)="39b3f3213c65ec11235bd36feded9de8c4341d3bd10d53d904703a0dab749b66abf068c9f61cc922256d80fe1946c738c12b249480b41e8d2b5c92657a941255b79d4dd10f73e7bb796aecbdc8f8fc4812a6eb6a71", 0x55}, {&(0x7f0000001fc0)="96aa3a91b28ebd72e8e97554240bdf96338890525bbe6ab8ce256ffd3f5d49d6912fdaafa8822aa1da663706e10038d81cf48b0445b875edb23d86fae42e1c5b615f325d6a9bf6b7584c93ec9bb7a3f94320d768879b59836715298d6e8b1b211da0fa74acadc6e4ae964f134b1dc7", 0x6f}], 0x4, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}], 0x68, 0x10000000}}], 0x5, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000dd000/0x1000)=nil, 0x1000, 0x1, 0x4010, r5, 0x10000000) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r10, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async, rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 32) syz_io_uring_submit(r6, r10, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r10, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1}, 0x7) (async) shutdown(r3, 0x1) 04:03:00 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x100010, r3, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:03:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3393, &(0x7f00000001c0)={0x0, 0xb1b4, 0x0, 0x1, 0x35}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) syz_io_uring_submit(0x0, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000380)='./file0\x00', 0xc0, 0x220080, 0x23456}, 0xf3) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r8, 0x2a27, 0x7052, 0x1, &(0x7f0000000180), 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:00 executing program 2: dup(0xffffffffffffffff) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x25ca, &(0x7f00000005c0)={0x0, 0xa4d0, 0x20, 0x0, 0xd8, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)="7fb992fccd9561037f2b9f9694891798e749a834bb9287812e62279b0510fd6b7738d4b0d981469c4ab3132ec30eb1e8807a8e0e6c78497ae937ace0cdf199517d839670e6ab726ba98d1db5e5cae82c18f08ac0fb9cad0a7a98918f819b3bab97ecf7d63355ccf6e42da35309099b0d48949f5f3979a7c10f9d2e7bb624cdb264832e088ae673394a4cb05f60242008bfffcbacdc5e46fa4ead7ac2edcbd032ebe9b5bf646be1ce800c8044175b900779e28d540b573914d90bbcb196a1957da16a8391fac378e107c7d52c1e7527a6db89964daf824e27a0f28c01c0917e74da0471cf", 0xe4}, {&(0x7f0000000080)="bcb8d3e5f8ec82a81ce3c909d7e802de682b8665e999dd272285df29b30fedf8c66e6fb8f4d0b0f8d684b8c27bf1bde80ba8a4cb6a238621ff479db535d59b", 0x3f}, {&(0x7f0000000440)="cbe8f956ac13c5c9dde0bd4446370a26acb0cf21ff17d0c48db7975adecf1cddedc2efb32b346acd49f0a2d6d4bf683d22d18289562dfad040abd3911bdeabd2cc7705758d2a80cdd4854ff4bf21a2dc59fb539236eea788d523564ece27a6f9271136d948e870637ba7ab1cb5c8fcb271cf2fba5175f4ef14aa915782dae706dc1a899727e3c25c35ea64d9b4e937ed33c5a9fdd2abcc435ac2fdb28a07aa27cd655068b1d987e9ad0394f5821269314c0151e01f9794b83df5ec0c0ee8bc79d9c56cc69d71249e20a04011f9f2358ca04def576017b65c23627db0b6f5c1c9ab76b2a545", 0xe5}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20008004}, 0x14810) shutdown(r3, 0x1) 04:03:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0xa, 0x9, 0x9, 0x968c, 0x10, 0x1, {0x2}}, 0x15e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x2f4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) (async) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4000, @fd=r6, 0x4, &(0x7f0000000180)=""/232, 0xe8, 0x2, 0x1}, 0x2a) (async) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mknodat(r5, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 04:03:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x5, 0x5, &(0x7f0000000180)="faa04b4223a9a7f2d267afe545b5f60eb23352df1276804c5f69081c2676847b58c72f1055a78d47eb44c26765882090ade7acd14fae5f18dc1b48595c29e517e517e5053f8680a423adb593ff855b9f67b3d8184ff32ef3561bffbf0709a8a75ea38070ac0528af3eda50ccf0b6b7ce567e2dfd5d982558f9a6bd55ba3f93b2318698f153cdb25393419a261a4e308e1b3a34b74dddb3a334", 0x99, 0x18, 0x1}, 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3) shutdown(r3, 0x1) [ 484.127873][T30524] loop0: detected capacity change from 0 to 270 04:03:01 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x100010, r3, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) 04:03:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3393, &(0x7f00000001c0)={0x0, 0xb1b4, 0x0, 0x1, 0x35}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) syz_io_uring_submit(0x0, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000380)='./file0\x00', 0xc0, 0x220080, 0x23456}, 0xf3) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r8, 0x2a27, 0x7052, 0x1, &(0x7f0000000180), 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:01 executing program 2: dup(0xffffffffffffffff) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x25ca, &(0x7f00000005c0)={0x0, 0xa4d0, 0x20, 0x0, 0xd8, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)="7fb992fccd9561037f2b9f9694891798e749a834bb9287812e62279b0510fd6b7738d4b0d981469c4ab3132ec30eb1e8807a8e0e6c78497ae937ace0cdf199517d839670e6ab726ba98d1db5e5cae82c18f08ac0fb9cad0a7a98918f819b3bab97ecf7d63355ccf6e42da35309099b0d48949f5f3979a7c10f9d2e7bb624cdb264832e088ae673394a4cb05f60242008bfffcbacdc5e46fa4ead7ac2edcbd032ebe9b5bf646be1ce800c8044175b900779e28d540b573914d90bbcb196a1957da16a8391fac378e107c7d52c1e7527a6db89964daf824e27a0f28c01c0917e74da0471cf", 0xe4}, {&(0x7f0000000080)="bcb8d3e5f8ec82a81ce3c909d7e802de682b8665e999dd272285df29b30fedf8c66e6fb8f4d0b0f8d684b8c27bf1bde80ba8a4cb6a238621ff479db535d59b", 0x3f}, {&(0x7f0000000440)="cbe8f956ac13c5c9dde0bd4446370a26acb0cf21ff17d0c48db7975adecf1cddedc2efb32b346acd49f0a2d6d4bf683d22d18289562dfad040abd3911bdeabd2cc7705758d2a80cdd4854ff4bf21a2dc59fb539236eea788d523564ece27a6f9271136d948e870637ba7ab1cb5c8fcb271cf2fba5175f4ef14aa915782dae706dc1a899727e3c25c35ea64d9b4e937ed33c5a9fdd2abcc435ac2fdb28a07aa27cd655068b1d987e9ad0394f5821269314c0151e01f9794b83df5ec0c0ee8bc79d9c56cc69d71249e20a04011f9f2358ca04def576017b65c23627db0b6f5c1c9ab76b2a545", 0xe5}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20008004}, 0x14810) shutdown(r3, 0x1) dup(0xffffffffffffffff) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x25ca, &(0x7f00000005c0)={0x0, 0xa4d0, 0x20, 0x0, 0xd8, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)="7fb992fccd9561037f2b9f9694891798e749a834bb9287812e62279b0510fd6b7738d4b0d981469c4ab3132ec30eb1e8807a8e0e6c78497ae937ace0cdf199517d839670e6ab726ba98d1db5e5cae82c18f08ac0fb9cad0a7a98918f819b3bab97ecf7d63355ccf6e42da35309099b0d48949f5f3979a7c10f9d2e7bb624cdb264832e088ae673394a4cb05f60242008bfffcbacdc5e46fa4ead7ac2edcbd032ebe9b5bf646be1ce800c8044175b900779e28d540b573914d90bbcb196a1957da16a8391fac378e107c7d52c1e7527a6db89964daf824e27a0f28c01c0917e74da0471cf", 0xe4}, {&(0x7f0000000080)="bcb8d3e5f8ec82a81ce3c909d7e802de682b8665e999dd272285df29b30fedf8c66e6fb8f4d0b0f8d684b8c27bf1bde80ba8a4cb6a238621ff479db535d59b", 0x3f}, {&(0x7f0000000440)="cbe8f956ac13c5c9dde0bd4446370a26acb0cf21ff17d0c48db7975adecf1cddedc2efb32b346acd49f0a2d6d4bf683d22d18289562dfad040abd3911bdeabd2cc7705758d2a80cdd4854ff4bf21a2dc59fb539236eea788d523564ece27a6f9271136d948e870637ba7ab1cb5c8fcb271cf2fba5175f4ef14aa915782dae706dc1a899727e3c25c35ea64d9b4e937ed33c5a9fdd2abcc435ac2fdb28a07aa27cd655068b1d987e9ad0394f5821269314c0151e01f9794b83df5ec0c0ee8bc79d9c56cc69d71249e20a04011f9f2358ca04def576017b65c23627db0b6f5c1c9ab76b2a545", 0xe5}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20008004}, 0x14810) (async) shutdown(r3, 0x1) (async) 04:03:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0xa, 0x9, 0x9, 0x968c, 0x10, 0x1, {0x2}}, 0x15e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:01 executing program 2: dup(0xffffffffffffffff) (async) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x25ca, &(0x7f00000005c0)={0x0, 0xa4d0, 0x20, 0x0, 0xd8, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)="7fb992fccd9561037f2b9f9694891798e749a834bb9287812e62279b0510fd6b7738d4b0d981469c4ab3132ec30eb1e8807a8e0e6c78497ae937ace0cdf199517d839670e6ab726ba98d1db5e5cae82c18f08ac0fb9cad0a7a98918f819b3bab97ecf7d63355ccf6e42da35309099b0d48949f5f3979a7c10f9d2e7bb624cdb264832e088ae673394a4cb05f60242008bfffcbacdc5e46fa4ead7ac2edcbd032ebe9b5bf646be1ce800c8044175b900779e28d540b573914d90bbcb196a1957da16a8391fac378e107c7d52c1e7527a6db89964daf824e27a0f28c01c0917e74da0471cf", 0xe4}, {&(0x7f0000000080)="bcb8d3e5f8ec82a81ce3c909d7e802de682b8665e999dd272285df29b30fedf8c66e6fb8f4d0b0f8d684b8c27bf1bde80ba8a4cb6a238621ff479db535d59b", 0x3f}, {&(0x7f0000000440)="cbe8f956ac13c5c9dde0bd4446370a26acb0cf21ff17d0c48db7975adecf1cddedc2efb32b346acd49f0a2d6d4bf683d22d18289562dfad040abd3911bdeabd2cc7705758d2a80cdd4854ff4bf21a2dc59fb539236eea788d523564ece27a6f9271136d948e870637ba7ab1cb5c8fcb271cf2fba5175f4ef14aa915782dae706dc1a899727e3c25c35ea64d9b4e937ed33c5a9fdd2abcc435ac2fdb28a07aa27cd655068b1d987e9ad0394f5821269314c0151e01f9794b83df5ec0c0ee8bc79d9c56cc69d71249e20a04011f9f2358ca04def576017b65c23627db0b6f5c1c9ab76b2a545", 0xe5}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20008004}, 0x14810) (async) shutdown(r3, 0x1) 04:03:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x2f4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x2f4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) io_uring_setup(0x3130, &(0x7f0000000180)={0x0, 0x82f4, 0x4, 0x0, 0x199, 0x0, r5}) 04:03:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x5, 0x5, &(0x7f0000000180)="faa04b4223a9a7f2d267afe545b5f60eb23352df1276804c5f69081c2676847b58c72f1055a78d47eb44c26765882090ade7acd14fae5f18dc1b48595c29e517e517e5053f8680a423adb593ff855b9f67b3d8184ff32ef3561bffbf0709a8a75ea38070ac0528af3eda50ccf0b6b7ce567e2dfd5d982558f9a6bd55ba3f93b2318698f153cdb25393419a261a4e308e1b3a34b74dddb3a334", 0x99, 0x18, 0x1}, 0x80) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3) (async) shutdown(r3, 0x1) 04:03:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x5, 0x5, &(0x7f0000000180)="faa04b4223a9a7f2d267afe545b5f60eb23352df1276804c5f69081c2676847b58c72f1055a78d47eb44c26765882090ade7acd14fae5f18dc1b48595c29e517e517e5053f8680a423adb593ff855b9f67b3d8184ff32ef3561bffbf0709a8a75ea38070ac0528af3eda50ccf0b6b7ce567e2dfd5d982558f9a6bd55ba3f93b2318698f153cdb25393419a261a4e308e1b3a34b74dddb3a334", 0x99, 0x18, 0x1}, 0x80) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3) (async) shutdown(r3, 0x1) 04:03:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x100010, r3, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r3, 0x3, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x100010, r3, 0x10000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:03:02 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3393, &(0x7f00000001c0)={0x0, 0xb1b4, 0x0, 0x1, 0x35}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) syz_io_uring_submit(0x0, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000380)='./file0\x00', 0xc0, 0x220080, 0x23456}, 0xf3) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r8, 0x2a27, 0x7052, 0x1, &(0x7f0000000180), 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/204, 0xcc}], 0x8}}], 0x1, 0x10000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0xa, 0x9, 0x9, 0x968c, 0x10, 0x1, {0x2}}, 0x15e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r6, 0x1) r8 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r8, 0x3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r8, 0x10000000) 04:03:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) io_uring_setup(0x3130, &(0x7f0000000180)={0x0, 0x82f4, 0x4, 0x0, 0x199, 0x0, r5}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async) io_uring_setup(0x3130, &(0x7f0000000180)={0x0, 0x82f4, 0x4, 0x0, 0x199, 0x0, r5}) (async) 04:03:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) io_uring_setup(0x3130, &(0x7f0000000180)={0x0, 0x82f4, 0x4, 0x0, 0x199, 0x0, r5}) 04:03:03 executing program 3: r0 = syz_io_uring_setup(0x4d3a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x9}, 0x90) 04:03:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000001d80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="000200000000000000000000ecff000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/204, 0xcc}], 0x8}}], 0x1, 0x10000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000000600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/204, 0xcc}], 0x8}}], 0x1, 0x10000, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x709c, 0x717c, 0x2, &(0x7f0000000080)={[0x2]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x5cea, 0x51cc, 0x4, &(0x7f0000000180)={[0x40]}, 0x8) shutdown(r3, 0x1) 04:03:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r6, 0x1) r8 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r8, 0x3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r8, 0x10000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r6, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r8, 0x3, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r8, 0x10000000) (async) 04:03:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg$unix(r4, &(0x7f0000000600)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/204, 0xcc}], 0x8}}], 0x1, 0x10000, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r6, 0x1) r8 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r8, 0x3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r8, 0x10000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, r4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r6, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r8, 0x3, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r8, 0x10000000) (async) 04:03:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_pgetevents(0x0, 0x800, 0xb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000340)={&(0x7f0000000080)={[0x4000000080]}, 0x8}) shutdown(0xffffffffffffffff, 0x1) 04:03:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x10000000) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x6a5d, 0x49ce, 0x3, &(0x7f0000000080)={[0x4]}, 0x8) shutdown(r3, 0x1) 04:03:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000001d80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="000200000000000000000000ecff000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000001d80)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) (async) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresgid(0x0, r6, 0xee01) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="000200000000000000000000ecff000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) 04:03:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000001d80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x401) (async) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) (async, rerun: 32) r5 = socket(0x10, 0x2, 0x0) (rerun: 32) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000540)=[r6, r6, r6, r8]) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 32) openat$zero(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="000200000000000000000000ecff000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:03:04 executing program 3: r0 = syz_io_uring_setup(0x4d3a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x9}, 0x90) 04:03:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x709c, 0x717c, 0x2, &(0x7f0000000080)={[0x2]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x5cea, 0x51cc, 0x4, &(0x7f0000000180)={[0x40]}, 0x8) (async) shutdown(r3, 0x1) 04:03:04 executing program 4: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) copy_file_range(r0, &(0x7f0000000200)=0xff, r3, &(0x7f0000000280)=0x8, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000680)=""/213, 0xd5}, 0x0, 0x2000, 0x1, {0x3}}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:03:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_pgetevents(0x0, 0x800, 0xb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000340)={&(0x7f0000000080)={[0x4000000080]}, 0x8}) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) io_pgetevents(0x0, 0x800, 0xb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000340)={&(0x7f0000000080)={[0x4000000080]}, 0x8}) (async) shutdown(0xffffffffffffffff, 0x1) (async) 04:03:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x10000000) (async, rerun: 32) r5 = open(0x0, 0x0, 0x0) (rerun: 32) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r5, 0x6a5d, 0x49ce, 0x3, &(0x7f0000000080)={[0x4]}, 0x8) (async) shutdown(r3, 0x1) 04:03:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:05 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x709c, 0x717c, 0x2, &(0x7f0000000080)={[0x2]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 64) io_uring_enter(r0, 0x5cea, 0x51cc, 0x4, &(0x7f0000000180)={[0x40]}, 0x8) shutdown(r3, 0x1) 04:03:05 executing program 4: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) copy_file_range(r0, &(0x7f0000000200)=0xff, r3, &(0x7f0000000280)=0x8, 0x40, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000680)=""/213, 0xd5}, 0x0, 0x2000, 0x1, {0x3}}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:03:05 executing program 3: r0 = syz_io_uring_setup(0x4d3a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x9}, 0x90) 04:03:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (rerun: 64) io_pgetevents(0x0, 0x800, 0xb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000340)={&(0x7f0000000080)={[0x4000000080]}, 0x8}) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (rerun: 32) 04:03:05 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x10000000) (rerun: 32) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r5, 0x6a5d, 0x49ce, 0x3, &(0x7f0000000080)={[0x4]}, 0x8) (async) shutdown(r3, 0x1) 04:03:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:03:06 executing program 4: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) copy_file_range(r0, &(0x7f0000000200)=0xff, r3, &(0x7f0000000280)=0x8, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000680)=""/213, 0xd5}, 0x0, 0x2000, 0x1, {0x3}}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) (async) copy_file_range(r0, &(0x7f0000000200)=0xff, r3, &(0x7f0000000280)=0x8, 0x40, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000680)=""/213, 0xd5}, 0x0, 0x2000, 0x1, {0x3}}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:03:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x6) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x1, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) 04:03:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r3, 0x82a6e, 0xa271, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, '.\x00'}) io_uring_enter(r9, 0x7442, 0x1576, 0x1, &(0x7f0000000280)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) 04:03:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r3, 0x82a6e, 0xa271, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, '.\x00'}) io_uring_enter(r9, 0x7442, 0x1576, 0x1, &(0x7f0000000280)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r3, 0x82a6e, 0xa271, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, '.\x00'}) (async) io_uring_enter(r9, 0x7442, 0x1576, 0x1, &(0x7f0000000280)={[0x1ff]}, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) (async) 04:03:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x30}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x6b04, &(0x7f0000000180)={0x0, 0xfc3b, 0x2, 0x0, 0x2ad, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x362a, &(0x7f0000000240)={0x0, 0x3e18, 0x2, 0x4, 0x1ad, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200002, 0x1c4, 0x11}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x2000, 0x4, 0x1}, 0x48) shutdown(r3, 0x1) 04:03:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r3, 0x82a6e, 0xa271, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, '.\x00'}) io_uring_enter(r9, 0x7442, 0x1576, 0x1, &(0x7f0000000280)={[0x1ff]}, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) 04:03:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x4010, r0, 0x8000000) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7f, 0x9, 0x1, {0x0, 0x0, r10}}, 0x8) 04:03:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x41bc, 0xba03, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000017c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x2) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) recvmmsg$unix(r6, &(0x7f00000005c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2}}], 0x2, 0x10000, &(0x7f0000001680)={0x0, 0x989680}) r7 = open(&(0x7f0000001780)='./file0\x00', 0x4280, 0x3) perf_event_open(&(0x7f0000001700)={0x754a0b22167340bf, 0x80, 0x8, 0xfe, 0x72, 0xea, 0x0, 0x200, 0x54108, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff18b0, 0x2, @perf_bp={&(0x7f00000016c0), 0x4}, 0x800, 0x1, 0x0, 0x5, 0x4, 0x200, 0x0, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r7, 0xb) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) 04:03:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x6) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x1, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x6) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x1, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) (async) 04:03:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x6) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x1, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r7, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x6) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x1, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r7, 0x1) (async) 04:03:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x2, {0x0, r4}, 0x6, 0x2}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x7d121767) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x10000, 0x1}, 0xfff) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x5, 0x200, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x30}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x6b04, &(0x7f0000000180)={0x0, 0xfc3b, 0x2, 0x0, 0x2ad, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x362a, &(0x7f0000000240)={0x0, 0x3e18, 0x2, 0x4, 0x1ad, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200002, 0x1c4, 0x11}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x2000, 0x4, 0x1}, 0x48) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x30}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_setup(0x6b04, &(0x7f0000000180)={0x0, 0xfc3b, 0x2, 0x0, 0x2ad, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) (async) syz_io_uring_setup(0x362a, &(0x7f0000000240)={0x0, 0x3e18, 0x2, 0x4, 0x1ad, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200002, 0x1c4, 0x11}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x2000, 0x4, 0x1}, 0x48) (async) shutdown(r3, 0x1) (async) 04:03:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x30}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_setup(0x6b04, &(0x7f0000000180)={0x0, 0xfc3b, 0x2, 0x0, 0x2ad, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)) (async) syz_io_uring_setup(0x362a, &(0x7f0000000240)={0x0, 0x3e18, 0x2, 0x4, 0x1ad, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200002, 0x1c4, 0x11}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x2000, 0x4, 0x1}, 0x48) shutdown(r3, 0x1) 04:03:07 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 64) shutdown(r3, 0x1) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x4010, r0, 0x8000000) (async, rerun: 32) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 32) syz_io_uring_submit(r7, r9, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async, rerun: 32) syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r7, r9, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 32) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7f, 0x9, 0x1, {0x0, 0x0, r10}}, 0x8) 04:03:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x41bc, 0xba03, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r5, 0x41bc, 0xba03, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:07 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x4010, r0, 0x8000000) (async) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async, rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async, rerun: 64) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 32) syz_io_uring_submit(r7, r9, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async, rerun: 32) syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7f, 0x9, 0x1, {0x0, 0x0, r10}}, 0x8) 04:03:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000017c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x2) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) recvmmsg$unix(r6, &(0x7f00000005c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2}}], 0x2, 0x10000, &(0x7f0000001680)={0x0, 0x989680}) r7 = open(&(0x7f0000001780)='./file0\x00', 0x4280, 0x3) perf_event_open(&(0x7f0000001700)={0x754a0b22167340bf, 0x80, 0x8, 0xfe, 0x72, 0xea, 0x0, 0x200, 0x54108, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff18b0, 0x2, @perf_bp={&(0x7f00000016c0), 0x4}, 0x800, 0x1, 0x0, 0x5, 0x4, 0x200, 0x0, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r7, 0xb) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000017c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x2) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) recvmmsg$unix(r6, &(0x7f00000005c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2}}], 0x2, 0x10000, &(0x7f0000001680)={0x0, 0x989680}) (async) open(&(0x7f0000001780)='./file0\x00', 0x4280, 0x3) (async) perf_event_open(&(0x7f0000001700)={0x754a0b22167340bf, 0x80, 0x8, 0xfe, 0x72, 0xea, 0x0, 0x200, 0x54108, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff18b0, 0x2, @perf_bp={&(0x7f00000016c0), 0x4}, 0x800, 0x1, 0x0, 0x5, 0x4, 0x200, 0x0, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r7, 0xb) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x41bc, 0xba03, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000017c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x2) r6 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) recvmmsg$unix(r6, &(0x7f00000005c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2}}], 0x2, 0x10000, &(0x7f0000001680)={0x0, 0x989680}) r7 = open(&(0x7f0000001780)='./file0\x00', 0x4280, 0x3) perf_event_open(&(0x7f0000001700)={0x754a0b22167340bf, 0x80, 0x8, 0xfe, 0x72, 0xea, 0x0, 0x200, 0x54108, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff18b0, 0x2, @perf_bp={&(0x7f00000016c0), 0x4}, 0x800, 0x1, 0x0, 0x5, 0x4, 0x200, 0x0, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r7, 0xb) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000017c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x2) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) recvmmsg$unix(r6, &(0x7f00000005c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2}}], 0x2, 0x10000, &(0x7f0000001680)={0x0, 0x989680}) (async) open(&(0x7f0000001780)='./file0\x00', 0x4280, 0x3) (async) perf_event_open(&(0x7f0000001700)={0x754a0b22167340bf, 0x80, 0x8, 0xfe, 0x72, 0xea, 0x0, 0x200, 0x54108, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff18b0, 0x2, @perf_bp={&(0x7f00000016c0), 0x4}, 0x800, 0x1, 0x0, 0x5, 0x4, 0x200, 0x0, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r7, 0xb) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:07 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r0, 0x30b, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1f00aab1227934bb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24048002}, 0x20000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x3, r3}, {0x2, 0x1, r5}, {0x2, 0xfb51d36508cffbf4, 0xee01}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x2}}, 0x4c, 0x1) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r6, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, 0x0, 0x2) shutdown(r9, 0x1) 04:03:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f00000dd000/0x4000)=nil, 0x4000, 0x12}, 0x7) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0}, 0x10001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x2, {0x0, r4}, 0x6, 0x2}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x7d121767) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x10000, 0x1}, 0xfff) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x5, 0x200, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x2, {0x0, r4}, 0x6, 0x2}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x7d121767) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x10000, 0x1}, 0xfff) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x5, 0x200, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x2, {0x0, r4}, 0x6, 0x2}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x7d121767) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x10000, 0x1}, 0xfff) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x5, 0x200, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x4, 0x80000000, 0x0, 0x10001, 0x0, 0x1}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:08 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r4, &(0x7f00000001c0)}, 0x81) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 04:03:08 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x8}, &(0x7f0000bd7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xfff, 0x1, &(0x7f0000000340)="4e2de20dfab315a59fda6614f3c0f0f8b371bd871d750cc3e9855bd01d5aca45863076b87aa63e4f8ffbcfa3ee83a7629e7d190f21dd08fe4ec35765f48d42141e6c5579dcbe6388c6f50122c34ee2c34e8ef261383720f189be50ac2eb1f8314392f1bd3d218462eac24a8b04c4e17d38acb63c5fadf11418019d84914a2ccd1400f865c81e89838faed95b97d2c0676df5d281c3676b65a539d569a52358f126935655e4b2ee0a9090f19917dda219f9397130d4f1433624b2bd4fb786c9622d245093b9944cc10a8bffe08728b17f2f5a043e5d2c", 0x3, 0x0, 0x0, {0x1}}, 0x800) munlock(&(0x7f0000800000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x100) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:08 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x8}, &(0x7f0000bd7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xfff, 0x1, &(0x7f0000000340)="4e2de20dfab315a59fda6614f3c0f0f8b371bd871d750cc3e9855bd01d5aca45863076b87aa63e4f8ffbcfa3ee83a7629e7d190f21dd08fe4ec35765f48d42141e6c5579dcbe6388c6f50122c34ee2c34e8ef261383720f189be50ac2eb1f8314392f1bd3d218462eac24a8b04c4e17d38acb63c5fadf11418019d84914a2ccd1400f865c81e89838faed95b97d2c0676df5d281c3676b65a539d569a52358f126935655e4b2ee0a9090f19917dda219f9397130d4f1433624b2bd4fb786c9622d245093b9944cc10a8bffe08728b17f2f5a043e5d2c", 0x3, 0x0, 0x0, {0x1}}, 0x800) munlock(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x100) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:08 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440)={0x0, 0x0, 0x8}, &(0x7f0000bd7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xfff, 0x1, &(0x7f0000000340)="4e2de20dfab315a59fda6614f3c0f0f8b371bd871d750cc3e9855bd01d5aca45863076b87aa63e4f8ffbcfa3ee83a7629e7d190f21dd08fe4ec35765f48d42141e6c5579dcbe6388c6f50122c34ee2c34e8ef261383720f189be50ac2eb1f8314392f1bd3d218462eac24a8b04c4e17d38acb63c5fadf11418019d84914a2ccd1400f865c81e89838faed95b97d2c0676df5d281c3676b65a539d569a52358f126935655e4b2ee0a9090f19917dda219f9397130d4f1433624b2bd4fb786c9622d245093b9944cc10a8bffe08728b17f2f5a043e5d2c", 0x3, 0x0, 0x0, {0x1}}, 0x800) (async) munlock(&(0x7f0000800000/0x800000)=nil, 0x800000) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (rerun: 64) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x100) (async) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x1) (async, rerun: 32) shutdown(r3, 0x1) (rerun: 32) 04:03:08 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x68, 0x69, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) 04:03:08 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r0, 0x30b, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1f00aab1227934bb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24048002}, 0x20000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x3, r3}, {0x2, 0x1, r5}, {0x2, 0xfb51d36508cffbf4, 0xee01}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x2}}, 0x4c, 0x1) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r6, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, 0x0, 0x2) shutdown(r9, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gretap0\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r0, 0x30b, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1f00aab1227934bb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24048002}, 0x20000400) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r3) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r5) (async) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x3, r3}, {0x2, 0x1, r5}, {0x2, 0xfb51d36508cffbf4, 0xee01}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x2}}, 0x4c, 0x1) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r6, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, 0x0, 0x2) (async) shutdown(r9, 0x1) (async) 04:03:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f00000dd000/0x4000)=nil, 0x4000, 0x12}, 0x7) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0}, 0x10001) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:08 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r0, 0x30b, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1f00aab1227934bb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24048002}, 0x20000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r3) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x3, r3}, {0x2, 0x1, r5}, {0x2, 0xfb51d36508cffbf4, 0xee01}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x2}}, 0x4c, 0x1) (async) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r6, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, 0x0, 0x2) (async) shutdown(r9, 0x1) 04:03:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1801) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x7f, 0x6, 0x83, 0x2a47}, {0x2, 0x3, 0x6, 0x2}, {0x54e, 0xa8, 0x80, 0x2}, {0x1, 0x6, 0x80, 0x6}, {0x5, 0x4, 0x1, 0x20}]}, 0x10) shutdown(r3, 0x1) 04:03:09 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x4, 0x80000000, 0x0, 0x10001, 0x0, 0x1}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r4, &(0x7f00000001c0)}, 0x81) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 04:03:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r4, &(0x7f00000001c0)}, 0x81) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 04:03:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x10000000) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) syz_io_uring_submit(r6, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r10, 0x2, 0x0, 0xd3c2, 0x5, 0x1}, 0x5) shutdown(r3, 0x1) 04:03:09 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x68, 0x69, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x68, 0x69, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:03:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f00000dd000/0x4000)=nil, 0x4000, 0x12}, 0x7) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0}, 0x10001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:09 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x68, 0x69, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) shutdown(r4, 0x1) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x68, 0x69, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r1, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async) 04:03:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x3b5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) r4 = syz_io_uring_setup(0x495d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x15f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd, 0x7, &(0x7f0000000740)=[{&(0x7f0000000600)="a5090996a1fccd0061083a6d7d376802b474e4aff765cf5b399a828ce1cecab3ac20aa", 0x23}, {&(0x7f0000000680)="c3b42bb7a2e5151452330526ad2d56b5421f10833e7eb64cf70ea404f29546cd29827f5a017c04c2b6300c6db530c388dd2fd21b3b365a3863ae915b659fbe9ed39071279f52cb249de25687152ff27d", 0x50}, {&(0x7f0000000700)="a9ad225985b891e459c27092d4a41d0de8c0b7e68dfbcd155fc24fc2e46b12596c49498f", 0x24}], 0x3, 0x14, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)={0x883a4}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x0, {0x0, r8}}, 0xff) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0xf925add0a9795126, 0x800, 0x0, {0x0, r8}}, 0x6e3e) shutdown(0xffffffffffffffff, 0x1) 04:03:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x3b5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) r4 = syz_io_uring_setup(0x495d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x15f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd, 0x7, &(0x7f0000000740)=[{&(0x7f0000000600)="a5090996a1fccd0061083a6d7d376802b474e4aff765cf5b399a828ce1cecab3ac20aa", 0x23}, {&(0x7f0000000680)="c3b42bb7a2e5151452330526ad2d56b5421f10833e7eb64cf70ea404f29546cd29827f5a017c04c2b6300c6db530c388dd2fd21b3b365a3863ae915b659fbe9ed39071279f52cb249de25687152ff27d", 0x50}, {&(0x7f0000000700)="a9ad225985b891e459c27092d4a41d0de8c0b7e68dfbcd155fc24fc2e46b12596c49498f", 0x24}], 0x3, 0x14, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)={0x883a4}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x0, {0x0, r8}}, 0xff) (async, rerun: 32) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0xf925add0a9795126, 0x800, 0x0, {0x0, r8}}, 0x6e3e) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) 04:03:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x3b5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) r4 = syz_io_uring_setup(0x495d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x15f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd, 0x7, &(0x7f0000000740)=[{&(0x7f0000000600)="a5090996a1fccd0061083a6d7d376802b474e4aff765cf5b399a828ce1cecab3ac20aa", 0x23}, {&(0x7f0000000680)="c3b42bb7a2e5151452330526ad2d56b5421f10833e7eb64cf70ea404f29546cd29827f5a017c04c2b6300c6db530c388dd2fd21b3b365a3863ae915b659fbe9ed39071279f52cb249de25687152ff27d", 0x50}, {&(0x7f0000000700)="a9ad225985b891e459c27092d4a41d0de8c0b7e68dfbcd155fc24fc2e46b12596c49498f", 0x24}], 0x3, 0x14, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)={0x883a4}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x0, {0x0, r8}}, 0xff) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0xf925add0a9795126, 0x800, 0x0, {0x0, r8}}, 0x6e3e) (async) shutdown(0xffffffffffffffff, 0x1) 04:03:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1801) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x7f, 0x6, 0x83, 0x2a47}, {0x2, 0x3, 0x6, 0x2}, {0x54e, 0xa8, 0x80, 0x2}, {0x1, 0x6, 0x80, 0x6}, {0x5, 0x4, 0x1, 0x20}]}, 0x10) shutdown(r3, 0x1) 04:03:10 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x4, 0x80000000, 0x0, 0x10001, 0x0, 0x1}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:10 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETGROUP(r0, 0x401054d5, 0x0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/243, 0xf3) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x68b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) getdents(r1, &(0x7f0000000440)=""/147, 0x93) shutdown(r5, 0x1) [ 492.762563][T17230] tun0: tun_chr_ioctl cmd 1074812117 [ 492.787586][T17230] tun0: tun_chr_ioctl cmd 35111 04:03:10 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETGROUP(r0, 0x401054d5, 0x0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/243, 0xf3) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x68b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) getdents(r1, &(0x7f0000000440)=""/147, 0x93) shutdown(r5, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETGROUP(r0, 0x401054d5, 0x0) (async) open(0x0, 0x0, 0x0) (async) getdents64(r1, &(0x7f0000000340)=""/243, 0xf3) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x68b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)) (async) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) (async) getdents(r1, &(0x7f0000000440)=""/147, 0x93) (async) shutdown(r5, 0x1) (async) [ 492.868901][T19561] tun0: tun_chr_ioctl cmd 1074812117 [ 492.880075][T19561] tun0: tun_chr_ioctl cmd 35111 04:03:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x10000000) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) syz_io_uring_submit(r6, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r10, 0x2, 0x0, 0xd3c2, 0x5, 0x1}, 0x5) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x10000000) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) (async) syz_io_uring_submit(r6, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r10, 0x2, 0x0, 0xd3c2, 0x5, 0x1}, 0x5) (async) shutdown(r3, 0x1) (async) 04:03:10 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETGROUP(r0, 0x401054d5, 0x0) (async) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/243, 0xf3) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x68b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)) io_uring_enter(r2, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x2) (async) getdents(r1, &(0x7f0000000440)=""/147, 0x93) (async) shutdown(r5, 0x1) [ 493.023027][T22955] tun0: tun_chr_ioctl cmd 1074812117 [ 493.041465][T22956] tun0: tun_chr_ioctl cmd 35111 04:03:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000200), 0x0, 0x4) recvfrom$unix(r4, &(0x7f0000000080)=""/42, 0x2a, 0x20, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, 0x3, 0x1, 0x100, 0x400, 0x1, 0x10}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r0, 0x100000000, 0x0, 0x1ff, 0x2, 0x1, {0x0, r9}}, 0x7fff) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x10000000) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) syz_io_uring_submit(r6, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r10, 0x2, 0x0, 0xd3c2, 0x5, 0x1}, 0x5) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x10000000) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) (async) syz_io_uring_submit(r6, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r10, 0x2, 0x0, 0xd3c2, 0x5, 0x1}, 0x5) (async) shutdown(r3, 0x1) (async) 04:03:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x8010, r0, 0x10000000) r6 = socket$inet(0x2, 0x2, 0x8000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0x0, {0x0, r6}, 0x0, 0xa, 0x0, {0x0, 0x0, r7}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1801) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x7f, 0x6, 0x83, 0x2a47}, {0x2, 0x3, 0x6, 0x2}, {0x54e, 0xa8, 0x80, 0x2}, {0x1, 0x6, 0x80, 0x6}, {0x5, 0x4, 0x1, 0x20}]}, 0x10) (async) shutdown(r3, 0x1) 04:03:10 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000080)=0x2, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x1) io_uring_setup(0x4876, &(0x7f0000000200)={0x0, 0x2da0, 0x0, 0x0, 0x388}) 04:03:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000080)=0x2, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x4) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r4, 0x1) (async, rerun: 32) io_uring_setup(0x4876, &(0x7f0000000200)={0x0, 0x2da0, 0x0, 0x0, 0x388}) (rerun: 32) 04:03:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000080)=0x2, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x4) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (rerun: 64) shutdown(r4, 0x1) io_uring_setup(0x4876, &(0x7f0000000200)={0x0, 0x2da0, 0x0, 0x0, 0x388}) 04:03:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async, rerun: 64) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (rerun: 64) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, 0x3, 0x1, 0x100, 0x400, 0x1, 0x10}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r0, 0x100000000, 0x0, 0x1ff, 0x2, 0x1, {0x0, r9}}, 0x7fff) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:03:11 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000200), 0x0, 0x4) (rerun: 64) recvfrom$unix(r4, &(0x7f0000000080)=""/42, 0x2a, 0x20, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x8010, r0, 0x10000000) (async, rerun: 32) r6 = socket$inet(0x2, 0x2, 0x8000) (async, rerun: 32) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async, rerun: 64) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0x0, {0x0, r6}, 0x0, 0xa, 0x0, {0x0, 0x0, r7}}, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:11 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r7, 0xd, &(0x7f00000001c0)="cfcb3ca9f4764f3269f1ca4ab0b92b49d0ef1c9ecccc5fd1cc862838ec47f10781ed0a889dc5eaa10372790572204c0be9346815be32726432d44eba800981075b779f6954bf720143f7e2a7793d0d4e9c3a7c7ef8c93742924e9fd3fa958abc79dabb15aba53660d065a957358e9826e27edddcf07ef6bc8705d7347eaf66350d6f8ab493a09cba1bfb6d3985188fbe3e19f8e9a848239c81fab2b371ed98f1083d7438e23b6214f2ff88654bd750a79bab381ba188361c1aa580900faf621f36df73c8352b6e39d72d152b475dfe4d7a8ab753fc835a3b1c02fdaf48118e", 0xdf, 0x1, 0x0, {0x0, r8}}, 0x3f) 04:03:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000200), 0x0, 0x4) (async) recvfrom$unix(r4, &(0x7f0000000080)=""/42, 0x2a, 0x20, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, 0x3, 0x1, 0x100, 0x400, 0x1, 0x10}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r0, 0x100000000, 0x0, 0x1ff, 0x2, 0x1, {0x0, r9}}, 0x7fff) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:03:12 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 04:03:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x8010, r0, 0x10000000) r6 = socket$inet(0x2, 0x2, 0x8000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0x0, {0x0, r6}, 0x0, 0xa, 0x0, {0x0, 0x0, r7}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x8010, r0, 0x10000000) (async) socket$inet(0x2, 0x2, 0x8000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0x0, {0x0, r6}, 0x0, 0xa, 0x0, {0x0, 0x0, r7}}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x200000ce, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r9}}, 0xff) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x41bbc57d) shutdown(r3, 0x1) 04:03:12 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r7, 0xd, &(0x7f00000001c0)="cfcb3ca9f4764f3269f1ca4ab0b92b49d0ef1c9ecccc5fd1cc862838ec47f10781ed0a889dc5eaa10372790572204c0be9346815be32726432d44eba800981075b779f6954bf720143f7e2a7793d0d4e9c3a7c7ef8c93742924e9fd3fa958abc79dabb15aba53660d065a957358e9826e27edddcf07ef6bc8705d7347eaf66350d6f8ab493a09cba1bfb6d3985188fbe3e19f8e9a848239c81fab2b371ed98f1083d7438e23b6214f2ff88654bd750a79bab381ba188361c1aa580900faf621f36df73c8352b6e39d72d152b475dfe4d7a8ab753fc835a3b1c02fdaf48118e", 0xdf, 0x1, 0x0, {0x0, r8}}, 0x3f) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r7, 0xd, &(0x7f00000001c0)="cfcb3ca9f4764f3269f1ca4ab0b92b49d0ef1c9ecccc5fd1cc862838ec47f10781ed0a889dc5eaa10372790572204c0be9346815be32726432d44eba800981075b779f6954bf720143f7e2a7793d0d4e9c3a7c7ef8c93742924e9fd3fa958abc79dabb15aba53660d065a957358e9826e27edddcf07ef6bc8705d7347eaf66350d6f8ab493a09cba1bfb6d3985188fbe3e19f8e9a848239c81fab2b371ed98f1083d7438e23b6214f2ff88654bd750a79bab381ba188361c1aa580900faf621f36df73c8352b6e39d72d152b475dfe4d7a8ab753fc835a3b1c02fdaf48118e", 0xdf, 0x1, 0x0, {0x0, r8}}, 0x3f) (async) 04:03:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r7, 0xd, &(0x7f00000001c0)="cfcb3ca9f4764f3269f1ca4ab0b92b49d0ef1c9ecccc5fd1cc862838ec47f10781ed0a889dc5eaa10372790572204c0be9346815be32726432d44eba800981075b779f6954bf720143f7e2a7793d0d4e9c3a7c7ef8c93742924e9fd3fa958abc79dabb15aba53660d065a957358e9826e27edddcf07ef6bc8705d7347eaf66350d6f8ab493a09cba1bfb6d3985188fbe3e19f8e9a848239c81fab2b371ed98f1083d7438e23b6214f2ff88654bd750a79bab381ba188361c1aa580900faf621f36df73c8352b6e39d72d152b475dfe4d7a8ab753fc835a3b1c02fdaf48118e", 0xdf, 0x1, 0x0, {0x0, r8}}, 0x3f) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r7, 0xd, &(0x7f00000001c0)="cfcb3ca9f4764f3269f1ca4ab0b92b49d0ef1c9ecccc5fd1cc862838ec47f10781ed0a889dc5eaa10372790572204c0be9346815be32726432d44eba800981075b779f6954bf720143f7e2a7793d0d4e9c3a7c7ef8c93742924e9fd3fa958abc79dabb15aba53660d065a957358e9826e27edddcf07ef6bc8705d7347eaf66350d6f8ab493a09cba1bfb6d3985188fbe3e19f8e9a848239c81fab2b371ed98f1083d7438e23b6214f2ff88654bd750a79bab381ba188361c1aa580900faf621f36df73c8352b6e39d72d152b475dfe4d7a8ab753fc835a3b1c02fdaf48118e", 0xdf, 0x1, 0x0, {0x0, r8}}, 0x3f) (async) 04:03:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x107500, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x42, &(0x7f0000000200)=[r3, 0xffffffffffffffff, r9, r10, r11, r0, r0, r4], 0x8, 0x0, 0x1}, 0x5) 04:03:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 04:03:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r2, 0x1) 04:03:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020602dffffffe020e0a04053900090035000a02010000001900054006271001020022dc1338d54404139b84136ef75afb83de440d000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r2, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) (async) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r2, 0x1) (async) [ 495.993840][T10675] netlink: 65319 bytes leftover after parsing attributes in process `syz-executor.5'. 04:03:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r2, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) (async) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r2, 0x1) (async) 04:03:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3141a4662bc451a4fec7627f23f2f5aed9930be49d403ef6931bb3f41eea541965bd68581684f4c812f7841577c7acd36720d2436d56026d60a82f34a46b493115ceb8132919b1bccfba8d7987991fda63508eaf26f7f796f550455ef7032110d522a30cbcb10007276c0f45213701d1b83936ea4bbb44a6fd31828f591a7dac50df8568b2a8ff79529b98ec7507056f764a411ea6dddaff7a2fa115e1286801e9fadda4fd5a4bfcf44111fbb64d736c8114d58516ed56401340fa980d6acbf525"], 0xb4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) close(r3) shutdown(r3, 0x1) open(&(0x7f0000000080)='./file0\x00', 0xa40, 0x1b1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x8, 0x81, 0x3, 0x0, 0x4, 0x0, {0x3}}, 0x7ff) 04:03:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 32) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async, rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async, rerun: 32) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r10 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x200000ce, r9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r9}}, 0xff) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x41bbc57d) (async) shutdown(r3, 0x1) 04:03:13 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r10 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x200000ce, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r9}}, 0xff) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x41bbc57d) (async) shutdown(r3, 0x1) 04:03:13 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x810}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x200000ce, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r7}}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x5, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800, 0x4000, 0x1, {0x0, r7}}, 0x4) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x107500, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x42, &(0x7f0000000200)=[r3, 0xffffffffffffffff, r9, r10, r11, r0, r0, r4], 0x8, 0x0, 0x1}, 0x5) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x107500, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) (async) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x42, &(0x7f0000000200)=[r3, 0xffffffffffffffff, r9, r10, r11, r0, r0, r4], 0x8, 0x0, 0x1}, 0x5) (async) 04:03:14 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) 04:03:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020602dffffffe020e0a04053900090035000a02010000001900054006271001020022dc1338d54404139b84136ef75afb83de440d000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) socket$inet6(0x10, 0x2, 0x0) (async) sendmsg(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020602dffffffe020e0a04053900090035000a02010000001900054006271001020022dc1338d54404139b84136ef75afb83de440d000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:14 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@phonet, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x107500, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x42, &(0x7f0000000200)=[r3, 0xffffffffffffffff, r9, r10, r11, r0, r0, r4], 0x8, 0x0, 0x1}, 0x5) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x107500, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) (async) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x42, &(0x7f0000000200)=[r3, 0xffffffffffffffff, r9, r10, r11, r0, r0, r4], 0x8, 0x0, 0x1}, 0x5) (async) [ 496.907794][T24524] netlink: 65319 bytes leftover after parsing attributes in process `syz-executor.5'. 04:03:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3141a4662bc451a4fec7627f23f2f5aed9930be49d403ef6931bb3f41eea541965bd68581684f4c812f7841577c7acd36720d2436d56026d60a82f34a46b493115ceb8132919b1bccfba8d7987991fda63508eaf26f7f796f550455ef7032110d522a30cbcb10007276c0f45213701d1b83936ea4bbb44a6fd31828f591a7dac50df8568b2a8ff79529b98ec7507056f764a411ea6dddaff7a2fa115e1286801e9fadda4fd5a4bfcf44111fbb64d736c8114d58516ed56401340fa980d6acbf525"], 0xb4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) close(r3) shutdown(r3, 0x1) open(&(0x7f0000000080)='./file0\x00', 0xa40, 0x1b1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x8, 0x81, 0x3, 0x0, 0x4, 0x0, {0x3}}, 0x7ff) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3141a4662bc451a4fec7627f23f2f5aed9930be49d403ef6931bb3f41eea541965bd68581684f4c812f7841577c7acd36720d2436d56026d60a82f34a46b493115ceb8132919b1bccfba8d7987991fda63508eaf26f7f796f550455ef7032110d522a30cbcb10007276c0f45213701d1b83936ea4bbb44a6fd31828f591a7dac50df8568b2a8ff79529b98ec7507056f764a411ea6dddaff7a2fa115e1286801e9fadda4fd5a4bfcf44111fbb64d736c8114d58516ed56401340fa980d6acbf525"], 0xb4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) close(r3) (async) shutdown(r3, 0x1) (async) open(&(0x7f0000000080)='./file0\x00', 0xa40, 0x1b1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) (async) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x8, 0x81, 0x3, 0x0, 0x4, 0x0, {0x3}}, 0x7ff) (async) 04:03:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020602dffffffe020e0a04053900090035000a02010000001900054006271001020022dc1338d54404139b84136ef75afb83de440d000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) socket$inet6(0x10, 0x2, 0x0) (async) sendmsg(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020602dffffffe020e0a04053900090035000a02010000001900054006271001020022dc1338d54404139b84136ef75afb83de440d000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x6b0ff389ea93a53f, 0x8010, r0, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = dup2(r4, r3) io_uring_setup(0x42bb, &(0x7f0000000180)={0x0, 0xae6f, 0x1, 0x1, 0x3b8, 0x0, r5}) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x80800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xb00c00, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x3f}}], [{@fowner_lt}, {@hash}, {@dont_hash}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', r8}}]}}) r9 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r9, 0xe02, 0xe8f6, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x40, @loopback, 0x70e8}, @in6={0xa, 0x4e20, 0x81, @mcast1, 0xffffff08}]}, &(0x7f0000000380)=0x10) 04:03:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3141a4662bc451a4fec7627f23f2f5aed9930be49d403ef6931bb3f41eea541965bd68581684f4c812f7841577c7acd36720d2436d56026d60a82f34a46b493115ceb8132919b1bccfba8d7987991fda63508eaf26f7f796f550455ef7032110d522a30cbcb10007276c0f45213701d1b83936ea4bbb44a6fd31828f591a7dac50df8568b2a8ff79529b98ec7507056f764a411ea6dddaff7a2fa115e1286801e9fadda4fd5a4bfcf44111fbb64d736c8114d58516ed56401340fa980d6acbf525"], 0xb4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) close(r3) shutdown(r3, 0x1) open(&(0x7f0000000080)='./file0\x00', 0xa40, 0x1b1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x8, 0x81, 0x3, 0x0, 0x4, 0x0, {0x3}}, 0x7ff) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3141a4662bc451a4fec7627f23f2f5aed9930be49d403ef6931bb3f41eea541965bd68581684f4c812f7841577c7acd36720d2436d56026d60a82f34a46b493115ceb8132919b1bccfba8d7987991fda63508eaf26f7f796f550455ef7032110d522a30cbcb10007276c0f45213701d1b83936ea4bbb44a6fd31828f591a7dac50df8568b2a8ff79529b98ec7507056f764a411ea6dddaff7a2fa115e1286801e9fadda4fd5a4bfcf44111fbb64d736c8114d58516ed56401340fa980d6acbf525"], 0xb4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) close(r3) (async) shutdown(r3, 0x1) (async) open(&(0x7f0000000080)='./file0\x00', 0xa40, 0x1b1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) (async) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x8, 0x81, 0x3, 0x0, 0x4, 0x0, {0x3}}, 0x7ff) (async) [ 497.064617][T26480] netlink: 65319 bytes leftover after parsing attributes in process `syz-executor.5'. 04:03:14 executing program 4: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x200000ce, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r3}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x1f9, &(0x7f0000000180)="4144f412d2b4fd2e4547e593eef5fa0a7b27fbbc1129ead2877009aaf97c36591ebdf247d5d0d37ad8be8a890e7edfc5f7637092905c4b5bb9125564ec446c25bf476c7ece9d82f45945ac688a827271b9b5d1fa8a130668c2554203a4aff5fcc9f5fc52b131d702fc9906aaca795e49b373425a83df6d489bb67cc2e7e6b0d241f2add37aa2789765a19c3b82891ddcb6fb382e5201012db268f624fa43918f6a11c5771aa8986c82486f6873f27e1d492fdf55a7dc6f93004ad7c68f73a19acce71396f3f127a6cfbd6876aa971c069e21e8ab81", 0xd5, 0x15, 0x1, {0x0, r3}}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) 04:03:14 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x810}, 0x0) (async, rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x200000ce, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r7}}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x5, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800, 0x4000, 0x1, {0x0, r7}}, 0x4) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:14 executing program 4: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x257}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0xa000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @remote}, {0x307, @remote}, 0x2a, {0x2, 0x4e24, @rand_addr=0x64010102}, 'sit0\x00'}) 04:03:14 executing program 4: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x257}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0xa000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @remote}, {0x307, @remote}, 0x2a, {0x2, 0x4e24, @rand_addr=0x64010102}, 'sit0\x00'}) 04:03:15 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@phonet, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@phonet, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:15 executing program 4: r0 = syz_io_uring_setup(0x5808, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) mknodat$loop(r5, &(0x7f0000000380)='./file1\x00', 0x6000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000180)='./file0\x00', 0x80, 0xa0201, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x6e87, 0x472, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'ipvlan1\x00', @ifru_settings={0x9, 0x8000, @fr=&(0x7f00000003c0)={0x3, 0x10c87461, 0x6, 0x8, 0x6, 0x4, 0x9}}}}) 04:03:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x257}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0xa000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @remote}, {0x307, @remote}, 0x2a, {0x2, 0x4e24, @rand_addr=0x64010102}, 'sit0\x00'}) 04:03:15 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x6b0ff389ea93a53f, 0x8010, r0, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) (async) r5 = dup2(r4, r3) io_uring_setup(0x42bb, &(0x7f0000000180)={0x0, 0xae6f, 0x1, 0x1, 0x3b8, 0x0, r5}) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x80800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xb00c00, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x3f}}], [{@fowner_lt}, {@hash}, {@dont_hash}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', r8}}]}}) (async) r9 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r9, 0xe02, 0xe8f6, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x40, @loopback, 0x70e8}, @in6={0xa, 0x4e20, 0x81, @mcast1, 0xffffff08}]}, &(0x7f0000000380)=0x10) 04:03:15 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@phonet, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@phonet, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x95a, &(0x7f0000000180)={0x0, 0xbb7f, 0x0, 0x0, 0x319, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r7, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000000340)=""/28, 0x1c}], 0x2}, 0x0, 0x2023, 0x1, {0x3, r8}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) [ 497.933885][T27180] loop4: detected capacity change from 0 to 270 04:03:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x200000ce, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r3}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x1f9, &(0x7f0000000180)="4144f412d2b4fd2e4547e593eef5fa0a7b27fbbc1129ead2877009aaf97c36591ebdf247d5d0d37ad8be8a890e7edfc5f7637092905c4b5bb9125564ec446c25bf476c7ece9d82f45945ac688a827271b9b5d1fa8a130668c2554203a4aff5fcc9f5fc52b131d702fc9906aaca795e49b373425a83df6d489bb67cc2e7e6b0d241f2add37aa2789765a19c3b82891ddcb6fb382e5201012db268f624fa43918f6a11c5771aa8986c82486f6873f27e1d492fdf55a7dc6f93004ad7c68f73a19acce71396f3f127a6cfbd6876aa971c069e21e8ab81", 0xd5, 0x15, 0x1, {0x0, r3}}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r5, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x200000ce, r3) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r3}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x1f9, &(0x7f0000000180)="4144f412d2b4fd2e4547e593eef5fa0a7b27fbbc1129ead2877009aaf97c36591ebdf247d5d0d37ad8be8a890e7edfc5f7637092905c4b5bb9125564ec446c25bf476c7ece9d82f45945ac688a827271b9b5d1fa8a130668c2554203a4aff5fcc9f5fc52b131d702fc9906aaca795e49b373425a83df6d489bb67cc2e7e6b0d241f2add37aa2789765a19c3b82891ddcb6fb382e5201012db268f624fa43918f6a11c5771aa8986c82486f6873f27e1d492fdf55a7dc6f93004ad7c68f73a19acce71396f3f127a6cfbd6876aa971c069e21e8ab81", 0xd5, 0x15, 0x1, {0x0, r3}}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) (async) 04:03:15 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x810}, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r8 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x200000ce, r7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r7}}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x5, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800, 0x4000, 0x1, {0x0, r7}}, 0x4) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:15 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000017c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused, @devid=r8}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002840)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @struct={0xfffffffd, 0xfff}, 0x5, 0x3, [0xd25, 0x8, 0x6, 0x1, 0x9, 0x6]}, {0x1f, @struct={0x435, 0x7}, r8, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x20, @usage=0x5, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x1, 0x3fe000000]}, {0x1, @struct={0x0, 0x7}, 0x0, 0x0, 0x6, 0x7f, 0x249a, 0x5, 0x9, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x200, 0x7, 0x8}}) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000680)={0x1, 0x200, @start={r8, 0x0, "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", "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"}, [0x3c, 0x9, 0x6, 0xffffffffffff7fff, 0x8, 0x800000000, 0x75c, 0x1, 0xffff, 0x7, 0x4fc, 0x9, 0xfffffffffffffbff, 0x1, 0x3ff, 0x3, 0x1, 0x4, 0x401, 0x1ff, 0x3, 0x3, 0x5a, 0x3, 0xed43, 0x4, 0x4, 0x7, 0x2, 0x6, 0x1f, 0x8, 0x8, 0x5, 0xfffffffffffffffd, 0x20, 0x1, 0x6, 0x3ff, 0x0, 0x0, 0x7, 0x2, 0x6, 0x7f, 0x72b5, 0x6, 0x100000001, 0xfffffffffffffffd, 0xbe8, 0x6, 0x9, 0x2d, 0x3, 0x6, 0x9, 0xffff, 0x9, 0x6, 0x400, 0x5, 0xfffffffffffffff7, 0x389, 0xad]}) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) 04:03:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x200000ce, r3) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r3}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x1f9, &(0x7f0000000180)="4144f412d2b4fd2e4547e593eef5fa0a7b27fbbc1129ead2877009aaf97c36591ebdf247d5d0d37ad8be8a890e7edfc5f7637092905c4b5bb9125564ec446c25bf476c7ece9d82f45945ac688a827271b9b5d1fa8a130668c2554203a4aff5fcc9f5fc52b131d702fc9906aaca795e49b373425a83df6d489bb67cc2e7e6b0d241f2add37aa2789765a19c3b82891ddcb6fb382e5201012db268f624fa43918f6a11c5771aa8986c82486f6873f27e1d492fdf55a7dc6f93004ad7c68f73a19acce71396f3f127a6cfbd6876aa971c069e21e8ab81", 0xd5, 0x15, 0x1, {0x0, r3}}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r5, 0x1) [ 498.179002][ C1] sd 0:0:1:0: [sda] tag#6866 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.189422][ C1] sd 0:0:1:0: [sda] tag#6866 CDB: opcode=0xe5 (vendor) [ 498.196292][ C1] sd 0:0:1:0: [sda] tag#6866 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 498.205864][ C1] sd 0:0:1:0: [sda] tag#6866 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 498.215431][ C1] sd 0:0:1:0: [sda] tag#6866 CDB[20]: ba 04:03:16 executing program 4: r0 = syz_io_uring_setup(0x5808, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) shutdown(r3, 0x1) (async) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) (async) mknodat$loop(r5, &(0x7f0000000380)='./file1\x00', 0x6000, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) (rerun: 64) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000180)='./file0\x00', 0x80, 0xa0201, 0x12345, {0x0, r6}}, 0x0) (async) io_uring_enter(r0, 0x6e87, 0x472, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) (async, rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async, rerun: 32) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'ipvlan1\x00', @ifru_settings={0x9, 0x8000, @fr=&(0x7f00000003c0)={0x3, 0x10c87461, 0x6, 0x8, 0x6, 0x4, 0x9}}}}) 04:03:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x6b0ff389ea93a53f, 0x8010, r0, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = dup2(r4, r3) io_uring_setup(0x42bb, &(0x7f0000000180)={0x0, 0xae6f, 0x1, 0x1, 0x3b8, 0x0, r5}) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x80800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xb00c00, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x3f}}], [{@fowner_lt}, {@hash}, {@dont_hash}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', r8}}]}}) r9 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(r9, 0xe02, 0xe8f6, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x40, @loopback, 0x70e8}, @in6={0xa, 0x4e20, 0x81, @mcast1, 0xffffff08}]}, &(0x7f0000000380)=0x10) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x6b0ff389ea93a53f, 0x8010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) dup2(r4, r3) (async) io_uring_setup(0x42bb, &(0x7f0000000180)={0x0, 0xae6f, 0x1, 0x1, 0x3b8, 0x0, r5}) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) inotify_init1(0x80800) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r8) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xb00c00, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x3f}}], [{@fowner_lt}, {@hash}, {@dont_hash}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', r8}}]}}) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r9, 0xe02, 0xe8f6, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x40, @loopback, 0x70e8}, @in6={0xa, 0x4e20, 0x81, @mcast1, 0xffffff08}]}, &(0x7f0000000380)=0x10) (async) [ 498.778343][ T3648] loop4: detected capacity change from 0 to 270 04:03:16 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x95a, &(0x7f0000000180)={0x0, 0xbb7f, 0x0, 0x0, 0x319, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r7, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000000340)=""/28, 0x1c}], 0x2}, 0x0, 0x2023, 0x1, {0x3, r8}}, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:16 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r9, 0x0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/248, 0xf8}], 0x2, &(0x7f0000000940)=""/215, 0xd7}, 0x0, 0x42, 0x1, {0x1, r10}}, 0x50e) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000004c0)=""/31, 0x1f}], 0x5, &(0x7f0000000680)=""/196, 0xc4}, 0x0, 0x40, 0x0, {0x0, r11}}, 0x1ff) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) shutdown(r3, 0x1) 04:03:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000080)={0x8, 'veth0_macvtap\x00', {'gre0\x00'}}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000180)={0xc5, 0x29, 0x1, {0x8001, [{{0xb0, 0x1, 0x1}, 0x8, 0x6, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x0, 0x4, 0x7, './file0'}, {{0x21, 0x4, 0x2}, 0x800, 0x5, 0x7, './file0'}, {{0x56, 0x1, 0x6}, 0x4, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x8, 0x3f, 0x7, './file0'}, {{0x10, 0x1, 0x5}, 0x6, 0xff, 0x7, './file0'}]}}, 0xc5) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 04:03:16 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000017c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused, @devid=r8}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002840)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @struct={0xfffffffd, 0xfff}, 0x5, 0x3, [0xd25, 0x8, 0x6, 0x1, 0x9, 0x6]}, {0x1f, @struct={0x435, 0x7}, r8, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x20, @usage=0x5, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x1, 0x3fe000000]}, {0x1, @struct={0x0, 0x7}, 0x0, 0x0, 0x6, 0x7f, 0x249a, 0x5, 0x9, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x200, 0x7, 0x8}}) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000680)={0x1, 0x200, @start={r8, 0x0, "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", "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"}, [0x3c, 0x9, 0x6, 0xffffffffffff7fff, 0x8, 0x800000000, 0x75c, 0x1, 0xffff, 0x7, 0x4fc, 0x9, 0xfffffffffffffbff, 0x1, 0x3ff, 0x3, 0x1, 0x4, 0x401, 0x1ff, 0x3, 0x3, 0x5a, 0x3, 0xed43, 0x4, 0x4, 0x7, 0x2, 0x6, 0x1f, 0x8, 0x8, 0x5, 0xfffffffffffffffd, 0x20, 0x1, 0x6, 0x3ff, 0x0, 0x0, 0x7, 0x2, 0x6, 0x7f, 0x72b5, 0x6, 0x100000001, 0xfffffffffffffffd, 0xbe8, 0x6, 0x9, 0x2d, 0x3, 0x6, 0x9, 0xffff, 0x9, 0x6, 0x400, 0x5, 0xfffffffffffffff7, 0x389, 0xad]}) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000017c0)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused, @devid=r8}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002840)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @struct={0xfffffffd, 0xfff}, 0x5, 0x3, [0xd25, 0x8, 0x6, 0x1, 0x9, 0x6]}, {0x1f, @struct={0x435, 0x7}, r8, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x20, @usage=0x5, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x1, 0x3fe000000]}, {0x1, @struct={0x0, 0x7}, 0x0, 0x0, 0x6, 0x7f, 0x249a, 0x5, 0x9, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x200, 0x7, 0x8}}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000680)={0x1, 0x200, @start={r8, 0x0, "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", "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"}, [0x3c, 0x9, 0x6, 0xffffffffffff7fff, 0x8, 0x800000000, 0x75c, 0x1, 0xffff, 0x7, 0x4fc, 0x9, 0xfffffffffffffbff, 0x1, 0x3ff, 0x3, 0x1, 0x4, 0x401, 0x1ff, 0x3, 0x3, 0x5a, 0x3, 0xed43, 0x4, 0x4, 0x7, 0x2, 0x6, 0x1f, 0x8, 0x8, 0x5, 0xfffffffffffffffd, 0x20, 0x1, 0x6, 0x3ff, 0x0, 0x0, 0x7, 0x2, 0x6, 0x7f, 0x72b5, 0x6, 0x100000001, 0xfffffffffffffffd, 0xbe8, 0x6, 0x9, 0x2d, 0x3, 0x6, 0x9, 0xffff, 0x9, 0x6, 0x400, 0x5, 0xfffffffffffffff7, 0x389, 0xad]}) (async) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) (async) 04:03:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000080)={0x8, 'veth0_macvtap\x00', {'gre0\x00'}}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000180)={0xc5, 0x29, 0x1, {0x8001, [{{0xb0, 0x1, 0x1}, 0x8, 0x6, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x0, 0x4, 0x7, './file0'}, {{0x21, 0x4, 0x2}, 0x800, 0x5, 0x7, './file0'}, {{0x56, 0x1, 0x6}, 0x4, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x8, 0x3f, 0x7, './file0'}, {{0x10, 0x1, 0x5}, 0x6, 0xff, 0x7, './file0'}]}}, 0xc5) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000080)={0x8, 'veth0_macvtap\x00', {'gre0\x00'}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) write$P9_RREADDIR(r5, &(0x7f0000000180)={0xc5, 0x29, 0x1, {0x8001, [{{0xb0, 0x1, 0x1}, 0x8, 0x6, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x0, 0x4, 0x7, './file0'}, {{0x21, 0x4, 0x2}, 0x800, 0x5, 0x7, './file0'}, {{0x56, 0x1, 0x6}, 0x4, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x8, 0x3f, 0x7, './file0'}, {{0x10, 0x1, 0x5}, 0x6, 0xff, 0x7, './file0'}]}}, 0xc5) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) 04:03:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000080)={0x8, 'veth0_macvtap\x00', {'gre0\x00'}}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) write$P9_RREADDIR(r5, &(0x7f0000000180)={0xc5, 0x29, 0x1, {0x8001, [{{0xb0, 0x1, 0x1}, 0x8, 0x6, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x0, 0x4, 0x7, './file0'}, {{0x21, 0x4, 0x2}, 0x800, 0x5, 0x7, './file0'}, {{0x56, 0x1, 0x6}, 0x4, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x8, 0x3f, 0x7, './file0'}, {{0x10, 0x1, 0x5}, 0x6, 0xff, 0x7, './file0'}]}}, 0xc5) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) [ 499.068462][ C0] sd 0:0:1:0: [sda] tag#6867 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.078851][ C0] sd 0:0:1:0: [sda] tag#6867 CDB: opcode=0xe5 (vendor) [ 499.085744][ C0] sd 0:0:1:0: [sda] tag#6867 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 499.095307][ C0] sd 0:0:1:0: [sda] tag#6867 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 499.104871][ C0] sd 0:0:1:0: [sda] tag#6867 CDB[20]: ba 04:03:16 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000017c0)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused, @devid=r8}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002840)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @struct={0xfffffffd, 0xfff}, 0x5, 0x3, [0xd25, 0x8, 0x6, 0x1, 0x9, 0x6]}, {0x1f, @struct={0x435, 0x7}, r8, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x20, @usage=0x5, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x1, 0x3fe000000]}, {0x1, @struct={0x0, 0x7}, 0x0, 0x0, 0x6, 0x7f, 0x249a, 0x5, 0x9, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x200, 0x7, 0x8}}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000680)={0x1, 0x200, @start={r8, 0x0, "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", "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"}, [0x3c, 0x9, 0x6, 0xffffffffffff7fff, 0x8, 0x800000000, 0x75c, 0x1, 0xffff, 0x7, 0x4fc, 0x9, 0xfffffffffffffbff, 0x1, 0x3ff, 0x3, 0x1, 0x4, 0x401, 0x1ff, 0x3, 0x3, 0x5a, 0x3, 0xed43, 0x4, 0x4, 0x7, 0x2, 0x6, 0x1f, 0x8, 0x8, 0x5, 0xfffffffffffffffd, 0x20, 0x1, 0x6, 0x3ff, 0x0, 0x0, 0x7, 0x2, 0x6, 0x7f, 0x72b5, 0x6, 0x100000001, 0xfffffffffffffffd, 0xbe8, 0x6, 0x9, 0x2d, 0x3, 0x6, 0x9, 0xffff, 0x9, 0x6, 0x400, 0x5, 0xfffffffffffffff7, 0x389, 0xad]}) (async) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) 04:03:16 executing program 5: r0 = syz_io_uring_setup(0x1000187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000df000/0x4000)=nil, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000017c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000001680)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/156, 0x9c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000500)=""/213, 0xd5}], 0x7, &(0x7f0000001700)=""/169, 0xa9}, 0x0, 0x20, 0x1, {0x1, r8}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_setup(0x4, &(0x7f0000001800)={0x0, 0xee8b, 0x0, 0x1, 0x8b}) shutdown(r9, 0x1) [ 499.191076][ C1] sd 0:0:1:0: [sda] tag#6868 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.201575][ C1] sd 0:0:1:0: [sda] tag#6868 CDB: opcode=0xe5 (vendor) [ 499.208451][ C1] sd 0:0:1:0: [sda] tag#6868 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 499.218064][ C1] sd 0:0:1:0: [sda] tag#6868 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 499.227654][ C1] sd 0:0:1:0: [sda] tag#6868 CDB[20]: ba 04:03:16 executing program 5: r0 = syz_io_uring_setup(0x1000187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000df000/0x4000)=nil, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000017c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000001680)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/156, 0x9c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000500)=""/213, 0xd5}], 0x7, &(0x7f0000001700)=""/169, 0xa9}, 0x0, 0x20, 0x1, {0x1, r8}}, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) io_uring_setup(0x4, &(0x7f0000001800)={0x0, 0xee8b, 0x0, 0x1, 0x8b}) (async) shutdown(r9, 0x1) 04:03:16 executing program 4: r0 = syz_io_uring_setup(0x5808, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) mknodat$loop(r5, &(0x7f0000000380)='./file1\x00', 0x6000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000180)='./file0\x00', 0x80, 0xa0201, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x6e87, 0x472, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'ipvlan1\x00', @ifru_settings={0x9, 0x8000, @fr=&(0x7f00000003c0)={0x3, 0x10c87461, 0x6, 0x8, 0x6, 0x4, 0x9}}}}) syz_io_uring_setup(0x5808, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000480)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)={[{@fat=@check_strict}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffffc}}]}) (async) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x0) (async) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) (async) mknodat$loop(r5, &(0x7f0000000380)='./file1\x00', 0x6000, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000180)='./file0\x00', 0x80, 0xa0201, 0x12345, {0x0, r6}}, 0x0) (async) io_uring_enter(r0, 0x6e87, 0x472, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'ipvlan1\x00', @ifru_settings={0x9, 0x8000, @fr=&(0x7f00000003c0)={0x3, 0x10c87461, 0x6, 0x8, 0x6, 0x4, 0x9}}}}) (async) 04:03:16 executing program 5: r0 = syz_io_uring_setup(0x1000187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000df000/0x4000)=nil, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000017c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000001680)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/156, 0x9c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000500)=""/213, 0xd5}], 0x7, &(0x7f0000001700)=""/169, 0xa9}, 0x0, 0x20, 0x1, {0x1, r8}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 64) io_uring_setup(0x4, &(0x7f0000001800)={0x0, 0xee8b, 0x0, 0x1, 0x8b}) shutdown(r9, 0x1) 04:03:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x8000000) (async) syz_io_uring_setup(0x95a, &(0x7f0000000180)={0x0, 0xbb7f, 0x0, 0x0, 0x319, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r9 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x200000ce, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r8}}, 0xff) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r7, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000000340)=""/28, 0x1c}], 0x2}, 0x0, 0x2023, 0x1, {0x3, r8}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:17 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (rerun: 64) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r9, 0x0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/248, 0xf8}], 0x2, &(0x7f0000000940)=""/215, 0xd7}, 0x0, 0x42, 0x1, {0x1, r10}}, 0x50e) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000004c0)=""/31, 0x1f}], 0x5, &(0x7f0000000680)=""/196, 0xc4}, 0x0, 0x40, 0x0, {0x0, r11}}, 0x1ff) (async, rerun: 64) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) open(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) (async) shutdown(r3, 0x1) (async) 04:03:17 executing program 5: r0 = syz_io_uring_setup(0x50db, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0xfffffff9) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x139c, &(0x7f0000000540)={0x0, 0x2, 0x10, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x4, 0x56c, 0x4, 0xfca, 0x3, 0x0, {0x3, r5}}, 0x7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x2001}, r7, 0x3, 0x0, 0x1, {0x0, r8}}, 0xe01d) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/14, 0xe}, {&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f00000003c0)=""/24, 0x18}], 0x4, &(0x7f0000000700)=""/222, 0xde}, 0x0, 0x40002000, 0x0, {0x41}}, 0x2) shutdown(r3, 0x1) r9 = open(0x0, 0x0, 0x0) io_uring_enter(r0, 0x1acb, 0xd151, 0x542f3dae27316a9b, &(0x7f0000000380)={[0x80]}, 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x3}, r9, 0x3, 0xffffffffffffffff, 0xd) io_uring_enter(r9, 0x7c06, 0x1680, 0x1, &(0x7f0000000180)={[0x4]}, 0x8) 04:03:17 executing program 5: r0 = syz_io_uring_setup(0x50db, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0xfffffff9) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x139c, &(0x7f0000000540)={0x0, 0x2, 0x10, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x4, 0x56c, 0x4, 0xfca, 0x3, 0x0, {0x3, r5}}, 0x7) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x2001}, r7, 0x3, 0x0, 0x1, {0x0, r8}}, 0xe01d) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/14, 0xe}, {&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f00000003c0)=""/24, 0x18}], 0x4, &(0x7f0000000700)=""/222, 0xde}, 0x0, 0x40002000, 0x0, {0x41}}, 0x2) (async) shutdown(r3, 0x1) (async) r9 = open(0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x1acb, 0xd151, 0x542f3dae27316a9b, &(0x7f0000000380)={[0x80]}, 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x3}, r9, 0x3, 0xffffffffffffffff, 0xd) (async) io_uring_enter(r9, 0x7c06, 0x1680, 0x1, &(0x7f0000000180)={[0x4]}, 0x8) [ 499.759701][T18775] loop4: detected capacity change from 0 to 270 04:03:17 executing program 5: r0 = syz_io_uring_setup(0x50db, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0xfffffff9) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x139c, &(0x7f0000000540)={0x0, 0x2, 0x10, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x4, 0x56c, 0x4, 0xfca, 0x3, 0x0, {0x3, r5}}, 0x7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x2001}, r7, 0x3, 0x0, 0x1, {0x0, r8}}, 0xe01d) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/14, 0xe}, {&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f00000003c0)=""/24, 0x18}], 0x4, &(0x7f0000000700)=""/222, 0xde}, 0x0, 0x40002000, 0x0, {0x41}}, 0x2) shutdown(r3, 0x1) r9 = open(0x0, 0x0, 0x0) io_uring_enter(r0, 0x1acb, 0xd151, 0x542f3dae27316a9b, &(0x7f0000000380)={[0x80]}, 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x3}, r9, 0x3, 0xffffffffffffffff, 0xd) io_uring_enter(r9, 0x7c06, 0x1680, 0x1, &(0x7f0000000180)={[0x4]}, 0x8) syz_io_uring_setup(0x50db, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0xfffffff9) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x139c, &(0x7f0000000540)={0x0, 0x2, 0x10, 0x0, 0x0, 0x0, r0}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x200000ce, r5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index=0x4, 0x56c, 0x4, 0xfca, 0x3, 0x0, {0x3, r5}}, 0x7) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x2001}, r7, 0x3, 0x0, 0x1, {0x0, r8}}, 0xe01d) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/14, 0xe}, {&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f00000003c0)=""/24, 0x18}], 0x4, &(0x7f0000000700)=""/222, 0xde}, 0x0, 0x40002000, 0x0, {0x41}}, 0x2) (async) shutdown(r3, 0x1) (async) open(0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x1acb, 0xd151, 0x542f3dae27316a9b, &(0x7f0000000380)={[0x80]}, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x3}, r9, 0x3, 0xffffffffffffffff, 0xd) (async) io_uring_enter(r9, 0x7c06, 0x1680, 0x1, &(0x7f0000000180)={[0x4]}, 0x8) (async) 04:03:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r5, 0x7227, 0xc0d1, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) 04:03:17 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x20082a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) r5 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7fff, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) (rerun: 32) shutdown(r3, 0x1) 04:03:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x480142) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4, r6, r0, r4, r0], 0x6) 04:03:18 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r9, 0x0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/248, 0xf8}], 0x2, &(0x7f0000000940)=""/215, 0xd7}, 0x0, 0x42, 0x1, {0x1, r10}}, 0x50e) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000004c0)=""/31, 0x1f}], 0x5, &(0x7f0000000680)=""/196, 0xc4}, 0x0, 0x40, 0x0, {0x0, r11}}, 0x1ff) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) (async) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r7, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r9, 0x0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/248, 0xf8}], 0x2, &(0x7f0000000940)=""/215, 0xd7}, 0x0, 0x42, 0x1, {0x1, r10}}, 0x50e) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000004c0)=""/31, 0x1f}], 0x5, &(0x7f0000000680)=""/196, 0xc4}, 0x0, 0x40, 0x0, {0x0, r11}}, 0x1ff) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:18 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r5, 0x7227, 0xc0d1, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) io_uring_enter(r5, 0x7227, 0xc0d1, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) (async) 04:03:18 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r5, 0x7227, 0xc0d1, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) 04:03:18 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x20082a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x20082a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:18 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x1a02}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:18 executing program 3: r0 = syz_io_uring_setup(0x107, &(0x7f00000002c0)={0x0, 0x7d0c, 0x0, 0x2, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = dup2(r0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1050002, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="7bdaf692aef5a757529cec9c8aaf19989492072c049d28789ab264387b7fe208b7aca86eb0f942919536ddcf049e93acca3e01345c6dd235b48edffafd4184faf3517fec8b23cc8ab3ebae16e6693b86e060813e783d8af213aa6ec872358dfdb04cf11572f04b3c21d7529d48ccbdfca0ada60bc3b4711c676e9a5dcedc1b2b529fd781ff358770bf961a75413648236442d763c811314ce7", @ANYRESDEC=r8, @ANYBLOB="2c64666c746793c2420b57700000bc783085225b60dd6fb9132d406d704c4f5a94695bac4c3b11f2d502da00d56f88813e8a4101e973c5d8c694602d0f00"/72, @ANYRESHEX=0xee01, @ANYBLOB=',loose,fscache,cache=fscache,uname=\x00,posixacl,func=FILE_CHECK,dont_appraise,\x00']) [ 501.038615][T30815] ================================================================== [ 501.046817][T30815] BUG: KCSAN: data-race in io_wqe_enqueue / io_wqe_worker [ 501.053913][T30815] [ 501.056216][T30815] write to 0xffff88813d474484 of 4 bytes by task 30833 on cpu 1: [ 501.063909][T30815] io_wqe_worker+0x79/0x4f0 [ 501.068399][T30815] ret_from_fork+0x1f/0x30 [ 501.072803][T30815] [ 501.075117][T30815] read to 0xffff88813d474484 of 4 bytes by task 30815 on cpu 0: [ 501.082729][T30815] io_wqe_enqueue+0x381/0x740 [ 501.087396][T30815] io_wq_enqueue+0x31/0x40 [ 501.091803][T30815] io_queue_async_work+0x202/0x430 [ 501.096906][T30815] __io_queue_sqe+0x44c/0x6a0 [ 501.101567][T30815] io_apoll_task_func+0x4b7/0x800 [ 501.106573][T30815] tctx_task_work+0x8b2/0xc90 [ 501.111229][T30815] task_work_run+0x8e/0x110 [ 501.115711][T30815] exit_to_user_mode_prepare+0x102/0x190 [ 501.121326][T30815] syscall_exit_to_user_mode+0x20/0x40 [ 501.126765][T30815] do_syscall_64+0x50/0xd0 [ 501.131159][T30815] entry_SYSCALL_64_after_hwframe+0x44/0xae 04:03:18 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x20082a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) [ 501.137032][T30815] [ 501.139340][T30815] value changed: 0x00000004 -> 0x00000007 [ 501.145039][T30815] [ 501.147344][T30815] Reported by Kernel Concurrency Sanitizer on: [ 501.153602][T30815] CPU: 0 PID: 30815 Comm: syz-executor.1 Not tainted 5.17.0-rc5-syzkaller-00006-g917bbdb107f8-dirty #0 [ 501.164605][T30815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.174647][T30815] ================================================================== 04:03:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x480142) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4, r6, r0, r4, r0], 0x6) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x480142) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4, r6, r0, r4, r0], 0x6) (async) 04:03:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x480142) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4, r6, r0, r4, r0], 0x6) 04:03:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x100010, r0, 0x10000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0x1ff, 0x0, 0xfff}, 0x2) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="dada147d4f12b5919a875a82ac290babcf342412fd4abdcf44e7789cac409f53981037cdc97fbc4740703880ddf3f4ac4e09db1bc5a4afce809439928673a43bfb40d0b2eefc66fde5a2bbb56e6aa954b55972d6e5b5e623005a1e67c8214a4bf35298617424dcb573d9ab94e0028082dc5bc476b01e9808513a281a896cb78ce99988c56d527706bc0f94a5b4e76c58a1e7c099f9f86b64", 0x98}], 0x1, &(0x7f0000000480)=[{0x110, 0x3a, 0x400, "8386588e44ea7b5515a8459c01da8d2e429cb880f6bdf0ac1f8006dedf324a52263433287d9d18624c55d08c2c89dab1884a653af2da56a2f5f7f97f91e3ced72afcce2b319b58923b7d077f162453c5f3761435da5eca6f2b5a721949ea8925dda0c535adf149e344e9ab53a208334493057e04032709af1a67375250eaeb9072255876b1df7643d0ec9f3120488864bd254d6977c36039b44d825ac8e6dd2f433a053cac70e6543f4af421b29bd01f1a3e5743f56dff4c580c7721ae2636e25f5b15ec90a3416d5c87bc478ae19cd7252b4c62cb5fcfedfa7e5067e1f63455c509de4896811cfe26554d1f9ea3ac145167b1f58a405d3e053635"}], 0x110}, 0x0, 0x40040d0, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x3e4f, &(0x7f0000000180)={0x0, 0x5df, 0x10, 0x2, 0x3a2, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) shutdown(r3, 0x1) 04:03:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x1a02}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x1a02}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:19 executing program 3: r0 = syz_io_uring_setup(0x107, &(0x7f00000002c0)={0x0, 0x7d0c, 0x0, 0x2, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = dup2(r0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1050002, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="7bdaf692aef5a757529cec9c8aaf19989492072c049d28789ab264387b7fe208b7aca86eb0f942919536ddcf049e93acca3e01345c6dd235b48edffafd4184faf3517fec8b23cc8ab3ebae16e6693b86e060813e783d8af213aa6ec872358dfdb04cf11572f04b3c21d7529d48ccbdfca0ada60bc3b4711c676e9a5dcedc1b2b529fd781ff358770bf961a75413648236442d763c811314ce7", @ANYRESDEC=r8, @ANYBLOB="2c64666c746793c2420b57700000bc783085225b60dd6fb9132d406d704c4f5a94695bac4c3b11f2d502da00d56f88813e8a4101e973c5d8c694602d0f00"/72, @ANYRESHEX=0xee01, @ANYBLOB=',loose,fscache,cache=fscache,uname=\x00,posixacl,func=FILE_CHECK,dont_appraise,\x00']) syz_io_uring_setup(0x107, &(0x7f00000002c0)={0x0, 0x7d0c, 0x0, 0x2, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) dup2(r0, 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setuid(r8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1050002, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="7bdaf692aef5a757529cec9c8aaf19989492072c049d28789ab264387b7fe208b7aca86eb0f942919536ddcf049e93acca3e01345c6dd235b48edffafd4184faf3517fec8b23cc8ab3ebae16e6693b86e060813e783d8af213aa6ec872358dfdb04cf11572f04b3c21d7529d48ccbdfca0ada60bc3b4711c676e9a5dcedc1b2b529fd781ff358770bf961a75413648236442d763c811314ce7", @ANYRESDEC=r8, @ANYBLOB="2c64666c746793c2420b57700000bc783085225b60dd6fb9132d406d704c4f5a94695bac4c3b11f2d502da00d56f88813e8a4101e973c5d8c694602d0f00"/72, @ANYRESHEX=0xee01, @ANYBLOB=',loose,fscache,cache=fscache,uname=\x00,posixacl,func=FILE_CHECK,dont_appraise,\x00']) (async) 04:03:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) splice(r5, &(0x7f00000001c0)=0x6, r6, &(0x7f0000000200)=0x2, 0xffff, 0x2) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:19 executing program 3: r0 = syz_io_uring_setup(0x107, &(0x7f00000002c0)={0x0, 0x7d0c, 0x0, 0x2, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) shutdown(r3, 0x1) (async, rerun: 32) r5 = dup2(r0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1050002, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="7bdaf692aef5a757529cec9c8aaf19989492072c049d28789ab264387b7fe208b7aca86eb0f942919536ddcf049e93acca3e01345c6dd235b48edffafd4184faf3517fec8b23cc8ab3ebae16e6693b86e060813e783d8af213aa6ec872358dfdb04cf11572f04b3c21d7529d48ccbdfca0ada60bc3b4711c676e9a5dcedc1b2b529fd781ff358770bf961a75413648236442d763c811314ce7", @ANYRESDEC=r8, @ANYBLOB="2c64666c746793c2420b57700000bc783085225b60dd6fb9132d406d704c4f5a94695bac4c3b11f2d502da00d56f88813e8a4101e973c5d8c694602d0f00"/72, @ANYRESHEX=0xee01, @ANYBLOB=',loose,fscache,cache=fscache,uname=\x00,posixacl,func=FILE_CHECK,dont_appraise,\x00']) 04:03:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x790e, 0x4414, 0x2, &(0x7f0000000080)={[0xffff]}, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x5, 0x6b, 0x6, 0x2}, {0x2, 0x0, 0x4, 0x7}, {0x5, 0x2, 0x4, 0x2}, {0x1, 0x1f, 0x68, 0x4}, {0x6, 0x4, 0x0, 0x2}, {0x1ff, 0x0, 0x20, 0x9}, {0x1, 0x7, 0x3, 0x4}, {0x7fff, 0xe9, 0x1, 0xfffffff7}]}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:19 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x4000400) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x790e, 0x4414, 0x2, &(0x7f0000000080)={[0xffff]}, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x5, 0x6b, 0x6, 0x2}, {0x2, 0x0, 0x4, 0x7}, {0x5, 0x2, 0x4, 0x2}, {0x1, 0x1f, 0x68, 0x4}, {0x6, 0x4, 0x0, 0x2}, {0x1ff, 0x0, 0x20, 0x9}, {0x1, 0x7, 0x3, 0x4}, {0x7fff, 0xe9, 0x1, 0xfffffff7}]}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x790e, 0x4414, 0x2, &(0x7f0000000080)={[0xffff]}, 0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x5, 0x6b, 0x6, 0x2}, {0x2, 0x0, 0x4, 0x7}, {0x5, 0x2, 0x4, 0x2}, {0x1, 0x1f, 0x68, 0x4}, {0x6, 0x4, 0x0, 0x2}, {0x1ff, 0x0, 0x20, 0x9}, {0x1, 0x7, 0x3, 0x4}, {0x7fff, 0xe9, 0x1, 0xfffffff7}]}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x790e, 0x4414, 0x2, &(0x7f0000000080)={[0xffff]}, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x5, 0x6b, 0x6, 0x2}, {0x2, 0x0, 0x4, 0x7}, {0x5, 0x2, 0x4, 0x2}, {0x1, 0x1f, 0x68, 0x4}, {0x6, 0x4, 0x0, 0x2}, {0x1ff, 0x0, 0x20, 0x9}, {0x1, 0x7, 0x3, 0x4}, {0x7fff, 0xe9, 0x1, 0xfffffff7}]}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@in6, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000000900)=""/173, 0xad}], 0x8, &(0x7f0000000a40)=""/92, 0x5c}, 0x0, 0x100, 0x1, {0x1}}, 0x20) r7 = getpid() perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xf8, 0x1b, 0xaf, 0x7, 0x0, 0x6, 0x20040, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x1, 0xffffffff, 0x9, 0x1, 0x2, 0x1, 0x0, 0x1f, 0x0, 0x1f}, r7, 0xffffffffffffffff, r4, 0x9) 04:03:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x100010, r0, 0x10000000) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0x1ff, 0x0, 0xfff}, 0x2) (async) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="dada147d4f12b5919a875a82ac290babcf342412fd4abdcf44e7789cac409f53981037cdc97fbc4740703880ddf3f4ac4e09db1bc5a4afce809439928673a43bfb40d0b2eefc66fde5a2bbb56e6aa954b55972d6e5b5e623005a1e67c8214a4bf35298617424dcb573d9ab94e0028082dc5bc476b01e9808513a281a896cb78ce99988c56d527706bc0f94a5b4e76c58a1e7c099f9f86b64", 0x98}], 0x1, &(0x7f0000000480)=[{0x110, 0x3a, 0x400, "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"}], 0x110}, 0x0, 0x40040d0, 0x1, {0x0, r8}}, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (rerun: 32) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x3e4f, &(0x7f0000000180)={0x0, 0x5df, 0x10, 0x2, 0x3a2, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) shutdown(r3, 0x1) 04:03:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x1a02}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x1a02}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) splice(r5, &(0x7f00000001c0)=0x6, r6, &(0x7f0000000200)=0x2, 0xffff, 0x2) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async, rerun: 32) shutdown(r3, 0x1) 04:03:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:20 executing program 1: r0 = syz_io_uring_setup(0x727c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xaca2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r0, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x36d1, &(0x7f0000000540)={0x0, 0x9940, 0x2, 0x3}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x28, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x6a2655d36979f5ce}, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd_index=0x3, 0xffffffff7fffffff, &(0x7f0000001c00)=[{&(0x7f0000001740)="7b844ad9fb96ae0985cabdfdf2626613a1fc241b2b61a061a1f4771d3636109b17f93c8241b1df3088434f5c21f61d25b91e21123582e4a2061c1ad1c4a9498e0535b406d6786313", 0x48}, {&(0x7f00000017c0)="2f489d41000000000000", 0xa}, {&(0x7f0000001800)="ca2fc05794976ce084ea15a4b173014d7c4b399c4b1b866716b899e4c2f5ad0a7d312fe364dac453dec8dfbaa61ae4b075bf95ede9b890882eea5aaef77f586f238c50cd00bdef325d23a5103ada22bd6692879eed9442072081ba80e4a899c8a789deb037bf7d61ac1502d017699d8d80ee3f4147f636ac52b5febb7576b3e067f451884051335fc002fb15", 0x8c}, {&(0x7f00000018c0)="3681773dd26d7d05bf2c971b68e0ac3ac4faa675943a318d28a311dbc588a0b86d662efc7e6c710fb95a9dee14f1a61e7ac256d6c4a4a48faae6e6b7f8f7301f000fc6f2642f44572b276b9717401b5619ca49e2bb6b20dc0110d55db0153ed15946b0affbab4a0315f261eca205476bbacd045ba650fa92fdf1355b7761c8b514f7ea26a7", 0x85}, {&(0x7f0000001980)="db71c37dcc3582dd1bc3152b58bdf1d0b688145556ea8b63e03c0ba49ea83fbb0e738583caddc3f9f76e11f3353858d343bee7e2bd0affdbbaf0a547b96aa6fe318d0798b10dae315d0dd92f7d1218e988886bf98b9be1d306955b1a451dc78c6c5ebfca01f70b46c7cf557edb7a507c37a6bc83af745e75d3a7b2a491d5247509a97d2e0916ee045d893f27b725a6a469573adfb35e23ebd7d62ab5d1c9b9a3e0a6b385b4e3129fbbe47f5507feff3e37e22d1d2216ba926d7725677fce68752273a5a6e853c42c6bcf920b53b9f986d285f42b674d440b3c12d00ca40f036d0e434ac7967574123fe78779858671937f993c3be738b4", 0xf7}, {&(0x7f0000001a80)="8b024e09b70e34f9155087d9012a56086e075cdee8d70fd5ad46be7d14b3655f12714c4edb178ad5a9268ad9ce2d6afd57dc6847f2cec044288b5a4340d6cda6794053264e62877b0785233c7a8ca6e9b0fddc51d787821ba3ab49240ffbada847767b98997fff40224fbc8148ec5038c53e7f20e21b6a353d7a711cdcbbbc8764436893", 0x84}, {&(0x7f0000001b40)="21016a7a2eccce995ff880a44ec556d32c4e8d68e339ac6bef10dd154b68aec4ea11bbc35bf7eb9261b5daed90471b4ff6a8839c1d81a01fa923c19dfd35ab90ede0e99398c99afa8c890ff6d002c736256fba30aed8fbade20c6478d0bfb8b36aa05d0b14870805e2886447d59d2b10201e1050372ee2796de406e5f6952aed1c88502c8e572e13475a4fa7f39962f41ab10e47b7f802391dfad336a13514ff7b6cc587dad32e7dae42ce", 0xab}], 0x7, 0x1, 0x1, {0x3}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x1bb0, &(0x7f00000003c0)={0x0, 0xad8b, 0x8, 0x2, 0x3da}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x285, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xffffffff) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xffe7, 0x0) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4e0, r8, &(0x7f0000001cc0)="4e8b41bf2900b22c512f8200706091f23261f4729b4f4b89d6bee749f17bbc3a15a6e1d352a6732bad435120cae08d47cb568c711fb8d33f4b155b393b88dc80a6ebe3871905197d8bcfcac48a15093831f877d6d349e55e709f16a8fa903db14ee924d443bc7d6c1dc4093e48fce73e3434a94dc28c6155e04ad8b9dec07772771a9bf0e836fb12d2a28437fc92a45b6fc2957ee795e947ff2ac184bc555a5914d1de14e127c7f4bac3cbb550c88663280c0a7410465ce1db0e0896ae6b466b3832282a827a7a5101666b73e3874e57c2b318e22211c048e4a28f457459eaf4", 0xe0, 0x610}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000680)="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", 0x1000, 0x223}]) shutdown(r3, 0x1) 04:03:20 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x4000400) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:03:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xaca2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r0, 0x10000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = io_uring_setup(0x36d1, &(0x7f0000000540)={0x0, 0x9940, 0x2, 0x3}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x28, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x6a2655d36979f5ce}, 0xfc) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd_index=0x3, 0xffffffff7fffffff, &(0x7f0000001c00)=[{&(0x7f0000001740)="7b844ad9fb96ae0985cabdfdf2626613a1fc241b2b61a061a1f4771d3636109b17f93c8241b1df3088434f5c21f61d25b91e21123582e4a2061c1ad1c4a9498e0535b406d6786313", 0x48}, {&(0x7f00000017c0)="2f489d41000000000000", 0xa}, {&(0x7f0000001800)="ca2fc05794976ce084ea15a4b173014d7c4b399c4b1b866716b899e4c2f5ad0a7d312fe364dac453dec8dfbaa61ae4b075bf95ede9b890882eea5aaef77f586f238c50cd00bdef325d23a5103ada22bd6692879eed9442072081ba80e4a899c8a789deb037bf7d61ac1502d017699d8d80ee3f4147f636ac52b5febb7576b3e067f451884051335fc002fb15", 0x8c}, {&(0x7f00000018c0)="3681773dd26d7d05bf2c971b68e0ac3ac4faa675943a318d28a311dbc588a0b86d662efc7e6c710fb95a9dee14f1a61e7ac256d6c4a4a48faae6e6b7f8f7301f000fc6f2642f44572b276b9717401b5619ca49e2bb6b20dc0110d55db0153ed15946b0affbab4a0315f261eca205476bbacd045ba650fa92fdf1355b7761c8b514f7ea26a7", 0x85}, {&(0x7f0000001980)="db71c37dcc3582dd1bc3152b58bdf1d0b688145556ea8b63e03c0ba49ea83fbb0e738583caddc3f9f76e11f3353858d343bee7e2bd0affdbbaf0a547b96aa6fe318d0798b10dae315d0dd92f7d1218e988886bf98b9be1d306955b1a451dc78c6c5ebfca01f70b46c7cf557edb7a507c37a6bc83af745e75d3a7b2a491d5247509a97d2e0916ee045d893f27b725a6a469573adfb35e23ebd7d62ab5d1c9b9a3e0a6b385b4e3129fbbe47f5507feff3e37e22d1d2216ba926d7725677fce68752273a5a6e853c42c6bcf920b53b9f986d285f42b674d440b3c12d00ca40f036d0e434ac7967574123fe78779858671937f993c3be738b4", 0xf7}, {&(0x7f0000001a80)="8b024e09b70e34f9155087d9012a56086e075cdee8d70fd5ad46be7d14b3655f12714c4edb178ad5a9268ad9ce2d6afd57dc6847f2cec044288b5a4340d6cda6794053264e62877b0785233c7a8ca6e9b0fddc51d787821ba3ab49240ffbada847767b98997fff40224fbc8148ec5038c53e7f20e21b6a353d7a711cdcbbbc8764436893", 0x84}, {&(0x7f0000001b40)="21016a7a2eccce995ff880a44ec556d32c4e8d68e339ac6bef10dd154b68aec4ea11bbc35bf7eb9261b5daed90471b4ff6a8839c1d81a01fa923c19dfd35ab90ede0e99398c99afa8c890ff6d002c736256fba30aed8fbade20c6478d0bfb8b36aa05d0b14870805e2886447d59d2b10201e1050372ee2796de406e5f6952aed1c88502c8e572e13475a4fa7f39962f41ab10e47b7f802391dfad336a13514ff7b6cc587dad32e7dae42ce", 0xab}], 0x7, 0x1, 0x1, {0x3}}, 0x1) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x8010, r0, 0x8000000) (async, rerun: 64) syz_io_uring_setup(0x1bb0, &(0x7f00000003c0)={0x0, 0xad8b, 0x8, 0x2, 0x3da}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x285, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xffffffff) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xffe7, 0x0) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4e0, r8, &(0x7f0000001cc0)="4e8b41bf2900b22c512f8200706091f23261f4729b4f4b89d6bee749f17bbc3a15a6e1d352a6732bad435120cae08d47cb568c711fb8d33f4b155b393b88dc80a6ebe3871905197d8bcfcac48a15093831f877d6d349e55e709f16a8fa903db14ee924d443bc7d6c1dc4093e48fce73e3434a94dc28c6155e04ad8b9dec07772771a9bf0e836fb12d2a28437fc92a45b6fc2957ee795e947ff2ac184bc555a5914d1de14e127c7f4bac3cbb550c88663280c0a7410465ce1db0e0896ae6b466b3832282a827a7a5101666b73e3874e57c2b318e22211c048e4a28f457459eaf4", 0xe0, 0x610}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000680)="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", 0x1000, 0x223}]) (async) shutdown(r3, 0x1) 04:03:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xaca2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r0, 0x10000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = io_uring_setup(0x36d1, &(0x7f0000000540)={0x0, 0x9940, 0x2, 0x3}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x200000ce, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x28, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x6a2655d36979f5ce}, 0xfc) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd_index=0x3, 0xffffffff7fffffff, &(0x7f0000001c00)=[{&(0x7f0000001740)="7b844ad9fb96ae0985cabdfdf2626613a1fc241b2b61a061a1f4771d3636109b17f93c8241b1df3088434f5c21f61d25b91e21123582e4a2061c1ad1c4a9498e0535b406d6786313", 0x48}, {&(0x7f00000017c0)="2f489d41000000000000", 0xa}, {&(0x7f0000001800)="ca2fc05794976ce084ea15a4b173014d7c4b399c4b1b866716b899e4c2f5ad0a7d312fe364dac453dec8dfbaa61ae4b075bf95ede9b890882eea5aaef77f586f238c50cd00bdef325d23a5103ada22bd6692879eed9442072081ba80e4a899c8a789deb037bf7d61ac1502d017699d8d80ee3f4147f636ac52b5febb7576b3e067f451884051335fc002fb15", 0x8c}, {&(0x7f00000018c0)="3681773dd26d7d05bf2c971b68e0ac3ac4faa675943a318d28a311dbc588a0b86d662efc7e6c710fb95a9dee14f1a61e7ac256d6c4a4a48faae6e6b7f8f7301f000fc6f2642f44572b276b9717401b5619ca49e2bb6b20dc0110d55db0153ed15946b0affbab4a0315f261eca205476bbacd045ba650fa92fdf1355b7761c8b514f7ea26a7", 0x85}, {&(0x7f0000001980)="db71c37dcc3582dd1bc3152b58bdf1d0b688145556ea8b63e03c0ba49ea83fbb0e738583caddc3f9f76e11f3353858d343bee7e2bd0affdbbaf0a547b96aa6fe318d0798b10dae315d0dd92f7d1218e988886bf98b9be1d306955b1a451dc78c6c5ebfca01f70b46c7cf557edb7a507c37a6bc83af745e75d3a7b2a491d5247509a97d2e0916ee045d893f27b725a6a469573adfb35e23ebd7d62ab5d1c9b9a3e0a6b385b4e3129fbbe47f5507feff3e37e22d1d2216ba926d7725677fce68752273a5a6e853c42c6bcf920b53b9f986d285f42b674d440b3c12d00ca40f036d0e434ac7967574123fe78779858671937f993c3be738b4", 0xf7}, {&(0x7f0000001a80)="8b024e09b70e34f9155087d9012a56086e075cdee8d70fd5ad46be7d14b3655f12714c4edb178ad5a9268ad9ce2d6afd57dc6847f2cec044288b5a4340d6cda6794053264e62877b0785233c7a8ca6e9b0fddc51d787821ba3ab49240ffbada847767b98997fff40224fbc8148ec5038c53e7f20e21b6a353d7a711cdcbbbc8764436893", 0x84}, {&(0x7f0000001b40)="21016a7a2eccce995ff880a44ec556d32c4e8d68e339ac6bef10dd154b68aec4ea11bbc35bf7eb9261b5daed90471b4ff6a8839c1d81a01fa923c19dfd35ab90ede0e99398c99afa8c890ff6d002c736256fba30aed8fbade20c6478d0bfb8b36aa05d0b14870805e2886447d59d2b10201e1050372ee2796de406e5f6952aed1c88502c8e572e13475a4fa7f39962f41ab10e47b7f802391dfad336a13514ff7b6cc587dad32e7dae42ce", 0xab}], 0x7, 0x1, 0x1, {0x3}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x1bb0, &(0x7f00000003c0)={0x0, 0xad8b, 0x8, 0x2, 0x3da}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x285, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xffffffff) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xffe7, 0x0) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4e0, r8, &(0x7f0000001cc0)="4e8b41bf2900b22c512f8200706091f23261f4729b4f4b89d6bee749f17bbc3a15a6e1d352a6732bad435120cae08d47cb568c711fb8d33f4b155b393b88dc80a6ebe3871905197d8bcfcac48a15093831f877d6d349e55e709f16a8fa903db14ee924d443bc7d6c1dc4093e48fce73e3434a94dc28c6155e04ad8b9dec07772771a9bf0e836fb12d2a28437fc92a45b6fc2957ee795e947ff2ac184bc555a5914d1de14e127c7f4bac3cbb550c88663280c0a7410465ce1db0e0896ae6b466b3832282a827a7a5101666b73e3874e57c2b318e22211c048e4a28f457459eaf4", 0xe0, 0x610}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000680)="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", 0x1000, 0x223}]) shutdown(r3, 0x1) 04:03:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x82a6e, 0x0, 0x3, 0x0, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async, rerun: 64) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@in6, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000000900)=""/173, 0xad}], 0x8, &(0x7f0000000a40)=""/92, 0x5c}, 0x0, 0x100, 0x1, {0x1}}, 0x20) (async, rerun: 32) r7 = getpid() (rerun: 32) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xf8, 0x1b, 0xaf, 0x7, 0x0, 0x6, 0x20040, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x1, 0xffffffff, 0x9, 0x1, 0x2, 0x1, 0x0, 0x1f, 0x0, 0x1f}, r7, 0xffffffffffffffff, r4, 0x9) 04:03:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x100010, r0, 0x10000000) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0x1ff, 0x0, 0xfff}, 0x2) (async) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="dada147d4f12b5919a875a82ac290babcf342412fd4abdcf44e7789cac409f53981037cdc97fbc4740703880ddf3f4ac4e09db1bc5a4afce809439928673a43bfb40d0b2eefc66fde5a2bbb56e6aa954b55972d6e5b5e623005a1e67c8214a4bf35298617424dcb573d9ab94e0028082dc5bc476b01e9808513a281a896cb78ce99988c56d527706bc0f94a5b4e76c58a1e7c099f9f86b64", 0x98}], 0x1, &(0x7f0000000480)=[{0x110, 0x3a, 0x400, "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"}], 0x110}, 0x0, 0x40040d0, 0x1, {0x0, r8}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x3e4f, &(0x7f0000000180)={0x0, 0x5df, 0x10, 0x2, 0x3a2, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) shutdown(r3, 0x1) 04:03:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x100, 0x100}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x200000ce, r9) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="f813c5106fdbbe14c56f35776d36e6bdbb6d95ee3322", 0x16}], 0x1, &(0x7f0000000740)}, 0x0, 0x4008010, 0x1}, 0xff) syz_io_uring_submit(0x0, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="274b7f4627bbcfe73bbfa2e107b00415b38655042c727864c811a396", 0x1c}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x468}, 0x0, 0x20000040, 0x1, {0x0, r9}}, 0x200) shutdown(r3, 0x1) 04:03:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@in6, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000000900)=""/173, 0xad}], 0x8, &(0x7f0000000a40)=""/92, 0x5c}, 0x0, 0x100, 0x1, {0x1}}, 0x20) (async) r7 = getpid() perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xf8, 0x1b, 0xaf, 0x7, 0x0, 0x6, 0x20040, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x1, 0xffffffff, 0x9, 0x1, 0x2, 0x1, 0x0, 0x1f, 0x0, 0x1f}, r7, 0xffffffffffffffff, r4, 0x9) 04:03:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index, 0x101, &(0x7f0000000180)="ced1b3f06d175d0a7092df7f884783cdec84ef1101427bccbac91eda8eafaa429f8a847b95abe3502e758aaf7d6d58be8a033786389a862b5ecff2dc188155eb367c1687b271f9d4fc38e478940b38e158eca1e917a59dab9e0692ea767a6a69a43737198a6b9a505c5bd5812ac80191593863e40cfaa11be666f652c2b04050b46eb18feb109be6ad31d4cbf28ead04c5d1ac03a8e10c57563ad0be17093812fe2a00e839864463", 0xa8, 0x8, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:21 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80800) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) splice(r5, &(0x7f00000001c0)=0x6, r6, &(0x7f0000000200)=0x2, 0xffff, 0x2) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (rerun: 64) shutdown(r3, 0x1) 04:03:21 executing program 1: r0 = syz_io_uring_setup(0x727c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) 04:03:21 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x4000400) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) (async) shutdown(r3, 0x1) 04:03:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x1674, &(0x7f0000000340)={0x0, 0x312c, 0x10, 0x0, 0xcd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffff8001, 0x1, 0x80}) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) shutdown(r3, 0x1) 04:03:21 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x100, 0x100}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r10 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x200000ce, r9) (async) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="f813c5106fdbbe14c56f35776d36e6bdbb6d95ee3322", 0x16}], 0x1, &(0x7f0000000740)}, 0x0, 0x4008010, 0x1}, 0xff) syz_io_uring_submit(0x0, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="274b7f4627bbcfe73bbfa2e107b00415b38655042c727864c811a396", 0x1c}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x468}, 0x0, 0x20000040, 0x1, {0x0, r9}}, 0x200) shutdown(r3, 0x1) 04:03:22 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index, 0x101, &(0x7f0000000180)="ced1b3f06d175d0a7092df7f884783cdec84ef1101427bccbac91eda8eafaa429f8a847b95abe3502e758aaf7d6d58be8a033786389a862b5ecff2dc188155eb367c1687b271f9d4fc38e478940b38e158eca1e917a59dab9e0692ea767a6a69a43737198a6b9a505c5bd5812ac80191593863e40cfaa11be666f652c2b04050b46eb18feb109be6ad31d4cbf28ead04c5d1ac03a8e10c57563ad0be17093812fe2a00e839864463", 0xa8, 0x8, 0x0, {0x0, r9}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:22 executing program 0: r0 = syz_io_uring_setup(0x3de2, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:22 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6d86) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) fsetxattr(r5, &(0x7f0000000200)=@known='user.incfs.size\x00', &(0x7f0000000240)=']\x00', 0x2, 0x0) 04:03:22 executing program 1: r0 = syz_io_uring_setup(0x727c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) syz_io_uring_setup(0x727c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) shutdown(r3, 0x1) (async) 04:03:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x1674, &(0x7f0000000340)={0x0, 0x312c, 0x10, 0x0, 0xcd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffff8001, 0x1, 0x80}) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) shutdown(r3, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_setup(0x1674, &(0x7f0000000340)={0x0, 0x312c, 0x10, 0x0, 0xcd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffff8001, 0x1, 0x80}) (async) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) shutdown(r3, 0x1) (async) 04:03:22 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x100, 0x100}, 0xfffffffc) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) r10 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) (rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x200000ce, r9) (async) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="f813c5106fdbbe14c56f35776d36e6bdbb6d95ee3322", 0x16}], 0x1, &(0x7f0000000740)}, 0x0, 0x4008010, 0x1}, 0xff) syz_io_uring_submit(0x0, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="274b7f4627bbcfe73bbfa2e107b00415b38655042c727864c811a396", 0x1c}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="e000000000000000110100003c000000e14ff337441a5eeb2244fbe6394f2fd38608827ac92359442e28b92e3f82bfcf041c4df79792df52945b8da5b27f76119977f44dbfd88ddec22fd525386448bba05187a1187de56779b969002a980e364dd3c3618393505359a63af47a3a0d3c995b6bc07bdf86cee61a49ddfc75097f5d02a8891d0114705952b029138897995f7b3f64dc212f22ca21622bbfd62a413fc109281b60fca5ddc5269aa8a04040df09284f29dc254aab709b60edb02aec19a1ee58bf460da7a91c5657512a1f2d161e0000000000100100000000000084000000020000b03639fcbe4d1fc921fae968c3e8fe3bde4fa60c4c6aed7f330503690b1290d26b5fa02e78df071e782f93194af21d99fd3392360d98d00eae9c82265b9a84c3367e89f21859f47612139195053f82084857ef60d447cfba3f173c418dfd13878790916ef93b44b4a455dbd4731ddb9afc97d91de0e7330c3d8725463e9199f713ab48806548d763ccfbf1bad883904b12b5fcf261875800a67ac6c90100000000000000fc19acd99f6420ac6d846d006123e293e4fa65c13af3a4a42b941d6ff2fc9048a5f11d528ba953b38dba22698f05a45b74e943354939e5f1f08e47f8359e42a1af32a9b187c7cf887b8aead22693dc723d000058000000000000001101000000020000b982f28b987c33f540b1f84b4cabe16d85ae1b4aab22e17219176483acccf7fb5b961ff151c9f3e781ce6f259f60c7021ad259395c09754c46ae5f5eeb14364425c2747fc1f40000f0000000000000000701000004000000e2276c0e40a573d839cf607d40fe24ea4f07f37687ce25be6b89b4a6560fb61e5fc76c43511143f2397f6061ba8f5c65dee7b9b7cb5f8412a99e2e3976d6b455fece8c7b4b8226929f82fa3c534cb4a556e424ab8fc7dbc0757ee3174e44fd8b25facd9ca2cb2b50b0fe97a1ba44468d3fe512690a33ca0af693f52bcdac9a5459764ab2a61bb661c1f72677ee3db5b9e25f4a9569647d4286d2405cb10a277e03845deb8d2e1fba0624d13005a8ece797ed2f22664397dec2693cf970ed310e6983a455b657535d3780730273670cde12627342e453c321b2f9218cd2d5a800900000000000000017010000abbc00005ea6d5a9c3eeb091ad3495795ccd8e8ac171e2d317516e7df080acc4b329a353c9ca3918dee6ba2e09c66da6a292497b7cdd74905c545e6306012ac1d595c736287a16be8d404c4b6f89728652ca537f548d8ff814f45188da0d2095cff9c9bd390c32dff0e7e56fc2943a24358739bf5c940b94b7b86b7b4906f2fdb700000010000000000000000f0100000200000068000000000000000b0100000200000040de665cc5fa9c167052303cd286c4c4c0469cdadb928909e7b1527ccfa9083a506ab5d4c0d2ee690af7095029eec65ddd8df11380769766ce84dbb391569e05090fca2bd22988287e8a836795d016dfe02e9fb129000000280000000000000011010000d5040000826dd75d851a9dfc06a4e9b0d3ca0a465f00000000000000a36304944ea6423c000000000000000000003e205e2e5b7a094a111f5536aa09de40b7f50f24f4441ae1f787ba697847f5e0cdd2ff5369b5b1385f10cae733fc7291b05b3abd8394852c2237da4795f01132d74d943d918317b86df177311c3f44055d3b9f20813c9747b907f7e8fc5188b905a6"], 0x468}, 0x0, 0x20000040, 0x1, {0x0, r9}}, 0x200) (async, rerun: 32) shutdown(r3, 0x1) (rerun: 32) 04:03:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_setup(0x1674, &(0x7f0000000340)={0x0, 0x312c, 0x10, 0x0, 0xcd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffff8001, 0x1, 0x80}) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) shutdown(r3, 0x1) 04:03:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) (async, rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 32) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index, 0x101, &(0x7f0000000180)="ced1b3f06d175d0a7092df7f884783cdec84ef1101427bccbac91eda8eafaa429f8a847b95abe3502e758aaf7d6d58be8a033786389a862b5ecff2dc188155eb367c1687b271f9d4fc38e478940b38e158eca1e917a59dab9e0692ea767a6a69a43737198a6b9a505c5bd5812ac80191593863e40cfaa11be666f652c2b04050b46eb18feb109be6ad31d4cbf28ead04c5d1ac03a8e10c57563ad0be17093812fe2a00e839864463", 0xa8, 0x8, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6d86) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) fsetxattr(r5, &(0x7f0000000200)=@known='user.incfs.size\x00', &(0x7f0000000240)=']\x00', 0x2, 0x0) 04:03:23 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000080)=0x1, 0x0, 0x4) shutdown(r3, 0x1) 04:03:23 executing program 0: r0 = syz_io_uring_setup(0x3de2, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) shutdown(r3, 0x1) 04:03:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@dmask={'dmask', 0x3d, 0x300000000000}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x200000ce, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x0, 0x1, {0x0, r6}}, 0xff) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r6, 0x0, &(0x7f00000027c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x1000)=nil, 0x1000, 0x11, 0x1}, 0x6) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r8, &(0x7f0000002780)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r9, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/119, 0x77}, {&(0x7f0000002680)=""/248, 0xf8}], 0x8}, 0x0, 0x8000, 0x1}, 0xe0c) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) 04:03:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r0, 0x82a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x2, 0x8, &(0x7f0000001c40)=[{&(0x7f0000000740)="a389eab581282fc07d2d2ab72732acd4866882222222fb6da6c87e5bd7b729e0eb69b60f1339ee9789b5f5e5d671fdfaa58e36231578a134c9aa5c07218b73054043826be3ba4b805149d50cd3d7ea7b6b2f8b56a5fe98e4735172c1c7c290c088a7d9b67e4f44fec3b36f49ff0e98370c1ae03eed50cc8db84b02859b875161ed5a81c14396ae86c6c2600c9a770c1fa2840b98d346928c08eec401fe78fde2368d7f5510b15f73bee5966cb2f8456d900935da5c3727b256da6e6b43", 0xbd, 0x7}, {&(0x7f0000000800)="6e4e77f6c925c07ce85f9af89cb0b4f363f816f5ea16b6d3d7717566f08f6a8b7ae2c871f1fcea2106fcf304e2540486718b5d46ea3f12737744363d83716477acdabe381e996dfb6ed0a25d3e0b1750c128086733d9cf15d9e88631b4e64bf3234b172b198df87c294d46ccdd1eafcf29e0d8363f1734e025a1b8a0fa891e07ab28ccec4e10922e5cc9badb3abed33d10515c53f67cc919c71ceaf47748fb96498a9784c2581a0ee9f1a2f94e890e6ef5553a35e135bfada9e96c11be2fbe892652be218246ed999c04a80a3e96e48b7bdbaf5829981ec13a3d76990ca33266814c11a48b8f6ffae3f15653fe74b002f796fd11a8fbc82df1baa84ff5ae89e68eece831833b6dc35694517f522510d3efd32888bb8f87aa5c4b343c30d3e0ef14c506b8233fdf6a6421d386d74765494982ae570694cb473d4c69511ccb204863030061cc6a69685f3e38e7f8db8b514e4ae4ed5eaf4b81fa7398da7e5adbd437d1cd6a5e1160c447b7f0ab4dd8cab6367c4e2cca7fdfec6ccdc7c8b89b15a7ee9f0bd5b793b5ea632971ed7641f3b46c14ea8680289729f7463f777ec4a889bf38811cd023a78141f9c8bf7be0ca1eb86b86042b8ad675e6a01a83e4b73f1e812e44d1bf962aa5831ae667b64c65e19e9ff4f3eb2da3f5bb2877f14b81194f6f352630aa726d2b941227f2053b2e880c80e4f517dd0230c2a58217dca54e668046dafcd45b6a112c0052e05b0fa35c87e0b976eacf3ef35edee5b36daca6d2168681ae4f7eef9444d35754dfb5de78c35b5893c01203e169dd1eb6bc65c7ba5afae12215eb2b38fa3591d6e22601fba49b2bb2b8a6d8d5ab57e235122cf7f99fc541ad131e2b34e1956c358a324e3fcd4ec6b88115e43835bc1de03ab8644498feed3f28b4a1e5e960d1aa1dbc2187324be6f615c9072d2e9a67f55edab89f8f2b4d0920ed2306fa99a37e83951469b1c8a0b4f5a0388069c72b7da5c6d4ee6ad0979f92230700c32d6df8a1938669ff5a6483e9f37750463bbbe0f0d453100a6b8b43037d5bffbe7603b2af1fbe29a1cb881cac738c35487f079f3a01d17813a304a74e32ebec22659ed0a0eb1344bcbb7cbc31940814fa991110101a99c9af46023cbdd768dbf707e92449513721adc6dfab466d3f2ad1bb6d64f8121b60c5d4ffe3232f0de7d3c0311c2b6d67be51570c8a1dde191cf2a38587846b0d90e88dccaeed26692f69fdd6345b23ffe6cdc84dfd3c9ac8878016d29c086b226304d407eaf8617f49590942f528a002adc74755f4d4f4fbde3252b1ee763d04858b33adb2607e32666b67825fd0e92b07ea7319acb86b6f1e79937322d95e694c3b7f32fec655657f38597378566f7d0a6ab8fc611f710f74cd8bf52593b73b75080b301c179ededb79b8293122e389c025f4f20c6b9ba75245fdee827658a87e6222e7594053f4ce2e113e837f051f8ae49aa82f3125a8d28c3de88288e0099472008d3c525c398c2fe100c75d75fb3868a439ed6960cc24036ff835a563a0a757d4f6891eb499d43cf9ad729f279b27e0a9ca17c02660cf8c55d70ec279d4e8052b53e0e687ef451c4483e09728c79470a204b77d2b1ac70d4fb043e002f5166c4e779c7b2c2e0d5bd86ab251e7e4e5be5c67c8fdfc42e82778c0fe5bef5a5ca8a9696be0ff2cf614c32993147739a921b6e565583953debe4e9c948cc8e3cbcc2b202ccae39f50b3e5c8fe54279d379b0238b414aa8e9b3c553aad30bab4150957f82416c057f9d49f3512e2b53f6ec1ee0145e61ecc0d75e0ae870bdb8218eb73fd12f98ea2a1ece97b71178bc25a4602d7dcfa79d45d965a8ee34954f38a5a7b393a5339256bfffa358a160f4909efd7847630caac80c8eac2f19cb18606a3f4e73d6ac4608a9a0722a854648c4172e0f0a3fcabe9e1534498e873719faecae550184aac1282352b2578f9d5bd90a382e88574ef9beadf2d5593fa30f277db72dec18ee60711cff773fa951824a3dd4bfabd0abb5600c8c83c62c46d48a9b9be408af70ae315a85895eb6cc2aeacb4b433864af91c1f99994baeff21072136ed64d38cc168bddb9482f8b78bafb0931a285dc7936b1f668682d16a768aa20ba3ec301593f4e8a57e4b634e33677b5d5f4ccc18119f894b868dab50e73bcaa16ea061c318853774f7407f7137e26d8b041fb67e68ad1c34600b54d081d8fdd979019d325ff80cb709d3e553c75e5d4256dd59ac63adf2f6f51fc942518451141ff49c150ea52639f11be4d52671acfb950052d91117a688888a9901fce3ef64593931f7f07918f291c718ed93fb83497215823df27f9fbf1eadae58036a309131be3ae1ae7ccacce0f5b209f6685b1b155f47225b0a0b81c82c195d35bf7b77d4d41972a38f93fa763adb895f95285384d601b058da6f6b8066576540abb3d808951a0e3a3f39631d7ae2d6c7b677c43aa5e2ffa689760d8cd862faada21cff0ab7a38af6a0c6f8d138d4b84e5c49fe736be92c587c1b60657da752a88f1024c6cb2ccc4508b44d751aa22289905c8086d4f89a17f64386118ccc475502af98ac31ea991db96102fd5e607c6db873ff112d1548c1fa3462f2b7049f08dd68b53b7bf319045c81922b07027f81bf463f1564dabbe11b1b07e77926c0573e5d1ff9a7fae17bb3039003f9a124c35729f23b3633aacc4e0f728175116ce11d55ff83ad68bc635d7e99f5a8c4bda20c590816a7ef058e2e44b58ed192648ffd0c4f0353ca0c82e5a412a371807eea77315b6877d1c45b85e3d7925ead4d290e600ea39d20aec3da0f9a90f8602c23d04f35c08d0909aa241e67b9b17513c83e91eaa2fc33c806b8596d80866e7a1e517f68f9c8c25ee1f6698e3434fc4100f716083ffe63f40f6e2574f550e969015543c5584d1525e864a14e982319c32aabc74ae55960ba03d5d2d808094358f70696cac10af87d043d20e784cec8d7060fc417ec4242a93ca99fb3ae55053707833ac701079305b98da80820d758e9bb4b60b4e07728f3411990124866eb5ea2c5ca613faf25638e98e8639c58c923fdc131a2f4d96993a3d806184567c9d8cb3e60acdddc59cc69565373b9bfeb1541f32178fcb3bcfeabb46736d073a6b8d63cf8a150552cdc23286e2d9d3d727d61dadc8b95996fc23d7378759eab4c4149ad57d32426db132d629a2d483e516397536280f4fb6eb78575f0ff5c6cba6c7c2359a74aea1e8ed3113921999ae4a43a9ac8533d123b66ee74f1e0c90fbe5cd7294a9adf40afbbce7fd9a5db4db62915b42d4b5a725c4f6422c8bec97bf9e07aa26f02efc758074479e25fb16b03f1fa1305a1816494ee1ecb35f21f59871733500e3782d56e9a25580a053055a8aec618a801922dd4d90d6ddb1d22c2fae17a18cce789d91140ea859fa19f15ae4160525d77932949431df09ae5c2fcd437db71c042cf09212a8ed73bf8d04907d1b533f49b27d0f65d28ebe87f7bbb3f6cd5873336ddd76e9e19c6bc4fb0f733fef7335cf1494b37a89027b871263e6136d48acc17c2c9443b104de6faebb0182d5e9eadda808de23e70acfc90d60dfcf370f05c7927e400fde6ca2a7fd1eed04a6a88735cfa15f6a0747824dd921a19cf1b6bf531ca0ed796ebd14c843f775de76a3737ee3700ee7296de1a699e3b79d9fa64eaedd9637b07738389826f3e8fc21f0b8c12fe23905fbf9de663e51fe622427a7bff6a44c375e588596a261c9b870e49594d35e5ca7e084bcd00561abfa9030add014fa753bd3eafbb74403c85248d4163b141ea931415bc5da7abe36da647f71c1e818ba74d813ed71fb48bd4db47a088ac8412b35ed42e8bea4dd5800f55effbf6a3bbd6afebd0f40856d3a4fab8363c13ad06cab0b7aad904b69c55d6c3c1959ba06eafc640788a54caf0615ef7052dc0f12b5de71316662c61b488e46cbe4b8ab6da594c94c420b550c1223de79169582ce4e2abb14e00fbf277a7a6866229c4b227f21ac9e2a5c11a05987aa9f8f78bcb3ad0150a6447eb2f8bb8a695c20a5c1513131cd5310c63a8f09f102d5de4dfe8471b017d6482e6ee2aab0be679b3d6fc1cb26370f9bf80fdcac320bc0bcdb912a5aab1ead669227ae47872b158e4388ee5a198fde1f1a84d0c44d45d30563773acf6b8df076e84ef3a1dffc6fd4353799af1d88ef71b0e13aed468b94d989e83167ac619b730f6783ba2072c56d80a82f3acd9b7de33bc3ff6834727fdf18d247794e41cc6ed17ca51b51e13841dc6ecbf46b435574b781965ddb528213928c5eab2ccb6db5e4d519f283dcfb848fcca1256ebbf4f0f367668853d18615a725bad3882387c439b708f2ef8c51ac847309b82fc716e9db1f226769ed9e354730fe9cf82418254ccff7c3b6d05760fb9550f75e162f05e329b48b91645429c8be9f75183c8d1c1e270a4e30f0189d60cc3e84402cba7e453d4bf7415935ad5adecf3bd27dc94d6529b179adf8cb13c98c7e93c9683365aa899d7cbe2a9e8461c387c573776184b8fe4c6e63f39481d2f9befb36a3b6889ddc37efc3c0b5310417709f9b076755a012ef9d017e2354c03e2478b604f7221561313c3b05185a40ef04c71b52484de8ad6ff9f865104fe40357734d393d73b2e535076436076365eb080d45b7192fff65b870b25ad4440bbb46d37340a8dfa12d8257b70dd5765cd0f7d712a194a395d0bf677da2d1357fd2d315c23522c859a6f158ae62e022e754dfa4b3aa64b72544d47fc3a606f7ef5e1beb010fbccd71fbc61db3372333701e5b2f689f8c91dbfe6232c26d590cc53654244e648e88611a493e2caa16be202f1a694f650cca2d6cb7b65fb78bd1e88d5de0e86098155f158339143d7833d07d298fe46faca228a34527e60a5b4455c2f4b982c68837bf48083d7139c1d270577b6f030cfbe4e77086f8ae3b5be2a0c5e296d69a935f558ccf1198c22b0ef5fa88cf97537b8959b3a8b86740936be32f391e56f97152d2b961ad4fdb6a83c72ec2c2f14da015c2b68714f3d40a3caaff8a25962538da112a530f0c57246e2c4d12f3451eb3a84734e7a2da8c6b562e7c0bb5628084d0679538f3e9ed81ea17b75c21578ea40434fec24349d6b4bc81b3593af8091f1c38cb92bfd245c999744df948b66ec591928bee59faaebbb2f01133b9db5d8070093286b614487300227009dc47c628b84f7a1d38ba8e569b2139d73a20664ee7e95fc421a3fdecc302e72a46050095e4d556d94a097bae73d92174779613758fdbed2ed68c3a3413f2e5381cf61fe2a66eb996393d99d732aebeebbb8bcd8b31223367c851e3d8b6c16001b5049fe8088916f66d1a53e5f48b648e4227cac92612f73066e305d5052f6ae4ac85c87e2a511f27c5a0d45d3d7d7629f966b7d63df1faa65ad5b9051e541b9f153cfd7ae8fd00b7647d3fbbf49c40b5c8f84c30d909786112b7f2d6ac3523432717bade6d7dc79f21590a3d75ed6f3aa95a950266e96a062689414a1aa799b0aef211290e81f13c550aa689c544bb217c895f4e66cf14e3a557d0250883f7f8566b7ff12650c899f468e58df2d30585dc117a8e826f40c2bb9b9ab13dfff0de8ae4851d742ccdcf87c7aae5dc112ed22b55b1ce07d0ab749c713caf1e822440dd1722b5418e3e2ff143e536f95a5709867174a853c0a7f7c2e344480761b9183b209897b8ade9f9c78fddb5c1441f40fa25acb5472e0c501aaa8297c671b4f472b1d47cf1c9581f16713e4a2ac8242477731df02d72595ca90f72b6dd9", 0x1000, 0x2}, {&(0x7f0000001800)="cbdbe78e3448631aba5e446a275bfd05cd075cc124026a83ea1ef25104d2c63d59a8cb230c8535b5eb", 0x29, 0x101}, {&(0x7f00000020c0)="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", 0x18c, 0xff}, {&(0x7f0000001a00)="6477c293afad05cbe20470420000000000000000c581e0cb608c53125fa44f496918b920ebd02259cb68e11eada20a1e128b3264410ee2ec837d69e96f81ff61de7edc90cbba232f23f4d282f64fb34a4